This is the start of the stable review cycle for the 4.9.63 release. There are 39 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat Nov 18 17:42:01 UTC 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.63-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.63-rc1 Willy Tarreau <w@xxxxxx> misc: panel: properly restore atomic counter on error path Nicholas Bellinger <nab@xxxxxxxxxxxxxxx> qla2xxx: Fix incorrect tcm_qla2xxx_free_cmd use during TMR ABORT (v2) Bart Van Assche <bart.vanassche@xxxxxxxxxxx> target/iscsi: Fix iSCSI task reassignment handling Chi-hsien Lin <Chi-Hsien.Lin@xxxxxxxxxxx> brcmfmac: remove setting IBSS mode when stopping AP Bilal Amarni <bilal.amarni@xxxxxxxxx> security/keys: add CONFIG_KEYS_COMPAT to Kconfig Florian Westphal <fw@xxxxxxxxx> netfilter: nat: Revert "netfilter: nat: convert nat bysrc hash to rhashtable" Florian Westphal <fw@xxxxxxxxx> netfilter: nat: avoid use of nf_conn_nat extension Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "ARM: dts: imx53-qsb-common: fix FEC pinmux config" Takashi Iwai <tiwai@xxxxxxx> ALSA: seq: Cancel pending autoload work at unbinding device Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> Input: ims-psu - check if CDC union descriptor is sane Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> usb: usbtest: fix NULL pointer dereference Johannes Berg <johannes.berg@xxxxxxxxx> mac80211: don't compare TKIP TX MIC key in reinstall prevention Jason A. Donenfeld <Jason@xxxxxxxxx> mac80211: use constant time comparison with keys Johannes Berg <johannes.berg@xxxxxxxxx> mac80211: accept key reinstall without changing anything Guillaume Nault <g.nault@xxxxxxxxxxxx> ppp: fix race in ppp device destruction Cong Wang <xiyou.wangcong@xxxxxxxxx> net_sched: avoid matching qdisc with zero handle Xin Long <lucien.xin@xxxxxxxxx> sctp: reset owner sk for data chunks on out queues when migrating a sock Julien Gomes <julien@xxxxxxxxxx> tun: allow positive return values on dev_get_valid_name() call Xin Long <lucien.xin@xxxxxxxxx> ip6_gre: update dst pmtu if dev mtu has been updated by toobig in __gre6_xmit Xin Long <lucien.xin@xxxxxxxxx> ip6_gre: only increase err_count for some certain type icmpv6 in ip6gre_err Xin Long <lucien.xin@xxxxxxxxx> ipip: only increase err_count for some certain type icmp in ipip_err Girish Moodalbail <girish.moodalbail@xxxxxxxxxx> tap: double-free in error path in tap_open() Andrei Vagin <avagin@xxxxxxxxxx> net/unix: don't show information about sockets from other namespaces Eric Dumazet <edumazet@xxxxxxxxxx> tcp/dccp: fix other lockdep splats accessing ireq_opt Eric Dumazet <edumazet@xxxxxxxxxx> tcp/dccp: fix lockdep splat in inet_csk_route_req() Laszlo Toth <laszlth@xxxxxxxxx> sctp: full support for ipv6 ip_nonlocal_bind & IP_FREEBIND Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: flowlabel: do not leave opt->tot_len with garbage Craig Gallek <kraig@xxxxxxxxxx> soreuseport: fix initialization race Eric Dumazet <edumazet@xxxxxxxxxx> packet: avoid panic in packet_getsockopt() Eric Dumazet <edumazet@xxxxxxxxxx> tcp/dccp: fix ireq->opt races Xin Long <lucien.xin@xxxxxxxxx> sctp: add the missing sock_owned_by_user check in sctp_icmp_redirect Cong Wang <xiyou.wangcong@xxxxxxxxx> tun: call dev_get_valid_name() before register_netdevice() Guillaume Nault <g.nault@xxxxxxxxxxxx> l2tp: check ps->sock before running pppol2tp_session_ioctl() Eric Dumazet <edumazet@xxxxxxxxxx> tcp: fix tcp_mtu_probe() vs highest_sack Eric Dumazet <edumazet@xxxxxxxxxx> net: call cgroup_sk_alloc() earlier in sk_clone_lock() Jason A. Donenfeld <Jason@xxxxxxxxx> netlink: do not set cb_running if dump's start() errs Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: addrconf: increment ifp refcount before ipv6_del_addr() Craig Gallek <kraig@xxxxxxxxxx> tun/tap: sanitize TUNSETSNDBUF input Alexey Kodanev <alexey.kodanev@xxxxxxxxxx> gso: fix payload length when gso_size is zero ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/imx53-qsb-common.dtsi | 20 +-- arch/powerpc/Kconfig | 5 - arch/s390/Kconfig | 3 - arch/sparc/Kconfig | 3 - arch/x86/Kconfig | 4 - drivers/input/misc/ims-pcu.c | 16 ++- drivers/misc/panel.c | 23 +++- drivers/net/macvtap.c | 20 +-- drivers/net/ppp/ppp_generic.c | 20 +++ drivers/net/tun.c | 7 + .../broadcom/brcm80211/brcmfmac/cfg80211.c | 3 - drivers/scsi/qla2xxx/tcm_qla2xxx.c | 33 ----- drivers/target/iscsi/iscsi_target.c | 19 +-- drivers/usb/misc/usbtest.c | 5 +- include/linux/netdevice.h | 3 + include/net/inet_sock.h | 8 +- include/net/netfilter/nf_conntrack.h | 3 +- include/net/netfilter/nf_nat.h | 1 - include/net/tcp.h | 6 +- include/target/target_core_base.h | 1 + net/core/dev.c | 6 +- net/core/sock.c | 3 +- net/core/sock_reuseport.c | 12 +- net/dccp/ipv4.c | 13 +- net/ipv4/cipso_ipv4.c | 24 +--- net/ipv4/gre_offload.c | 2 +- net/ipv4/inet_connection_sock.c | 9 +- net/ipv4/inet_hashtables.c | 5 +- net/ipv4/ipip.c | 59 ++++++--- net/ipv4/syncookies.c | 2 +- net/ipv4/tcp_input.c | 2 +- net/ipv4/tcp_ipv4.c | 21 +-- net/ipv4/tcp_output.c | 3 +- net/ipv4/udp.c | 5 +- net/ipv4/udp_offload.c | 2 +- net/ipv6/addrconf.c | 1 + net/ipv6/ip6_flowlabel.c | 1 + net/ipv6/ip6_gre.c | 20 ++- net/ipv6/ip6_offload.c | 2 +- net/ipv6/ip6_output.c | 4 +- net/l2tp/l2tp_ppp.c | 3 + net/mac80211/key.c | 54 +++++++- net/netfilter/nf_conntrack_core.c | 2 +- net/netfilter/nf_nat_core.c | 146 ++++++++------------- net/netlink/af_netlink.c | 13 +- net/packet/af_packet.c | 24 ++-- net/sched/sch_api.c | 2 + net/sctp/input.c | 2 +- net/sctp/ipv6.c | 6 +- net/sctp/socket.c | 32 +++++ net/unix/diag.c | 2 + security/keys/Kconfig | 4 + sound/core/seq/seq_device.c | 3 + 54 files changed, 403 insertions(+), 293 deletions(-)