This is the start of the stable review cycle for the 4.9.146 release. There are 51 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun Dec 16 11:56:52 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.146-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.146-rc1 Guenter Roeck <linux@xxxxxxxxxxxx> staging: speakup: Replace strncpy with memcpy Namhyung Kim <namhyung@xxxxxxxxxx> pstore: Convert console write to use ->write_buf Pan Bian <bianpan2016@xxxxxxx> ocfs2: fix potential use after free Qian Cai <cai@xxxxxx> debugobjects: avoid recursive calls with kmemleak Pan Bian <bianpan2016@xxxxxxx> hfsplus: do not free node before using Pan Bian <bianpan2016@xxxxxxx> hfs: do not free node before using Larry Chen <lchen@xxxxxxxx> ocfs2: fix deadlock caused by ocfs2_defrag_extent() Colin Ian King <colin.king@xxxxxxxxxxxxx> fscache, cachefiles: remove redundant variable 'cache' NeilBrown <neilb@xxxxxxxx> fscache: fix race between enablement and dropping of object Srikanth Boddepalli <boddepalli.srikanth@xxxxxxxxx> xen: xlate_mmu: add missing header to fix 'W=1' warning Y.C. Chen <yc_chen@xxxxxxxxxxxxxx> drm/ast: fixed reading monitor EDID not stable issue Pan Bian <bianpan2016@xxxxxxx> net: hisilicon: remove unexpected free_netdev Josh Elsasser <jelsasser@xxxxxxxxxxx> ixgbe: recognize 1000BaseLX SFP modules as 1Gbps Yunjian Wang <wangyunjian@xxxxxxxxxx> igb: fix uninitialized variables Kiran Kumar Modukuri <kiran.modukuri@xxxxxxxxx> cachefiles: Fix page leak in cachefiles_read_backing_file while vmscan is active Lorenzo Bianconi <lorenzo.bianconi@xxxxxxxxxx> net: thunderx: fix NULL pointer dereference in nic_remove Yi Wang <wang.yi59@xxxxxxxxxx> x86/kvm/vmx: fix old-style function declaration Yi Wang <wang.yi59@xxxxxxxxxx> KVM: x86: fix empty-body warnings Aaro Koskinen <aaro.koskinen@xxxxxx> USB: omap_udc: fix USB gadget functionality on Palm Tungsten E Aaro Koskinen <aaro.koskinen@xxxxxx> USB: omap_udc: fix omap_udc_start() on 15xx machines Aaro Koskinen <aaro.koskinen@xxxxxx> USB: omap_udc: fix crashes on probe error and module removal Aaro Koskinen <aaro.koskinen@xxxxxx> USB: omap_udc: use devm_request_irq() Xin Long <lucien.xin@xxxxxxxxx> ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf Martynas Pumputis <m@xxxxxxxxx> bpf: fix check of allowed specifiers in bpf_trace_printk Pan Bian <bianpan2016@xxxxxxx> exportfs: do not read dentry after free Peter Ujfalusi <peter.ujfalusi@xxxxxx> ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE Peter Ujfalusi <peter.ujfalusi@xxxxxx> ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE Majd Dibbiny <majd@xxxxxxxxxxxx> RDMA/mlx5: Fix fence type for IB_WR_LOCAL_INV WR Robbie Ko <robbieko@xxxxxxxxxxxx> Btrfs: send, fix infinite loop due to directory rename dependencies Artem Savkov <asavkov@xxxxxxxxxx> objtool: Fix segfault in .cold detection with -ffunction-sections Artem Savkov <asavkov@xxxxxxxxxx> objtool: Fix double-free in .cold detection error path Huacai Chen <chenhc@xxxxxxxxxx> hwmon: (w83795) temp4_type has writable permission Tzung-Bi Shih <tzungbi@xxxxxxxxxx> ASoC: dapm: Recalculate audio map forcely when card instantiated Peter Ujfalusi <peter.ujfalusi@xxxxxx> ASoC: omap-abe-twl6040: Fix missing audio card caused by deferred probing Nicolin Chen <nicoleotsuka@xxxxxxxxx> hwmon: (ina2xx) Fix current value calculation Thomas Richter <tmricht@xxxxxxxxxxxxx> s390/cpum_cf: Reject request for sampling in event initialization Florian Westphal <fw@xxxxxxxxx> selftests: add script to stress-test nft packet path vs. control plane YueHaibing <yuehaibing@xxxxxxxxxx> sysv: return 'err' instead of 0 in __sysv_write_inode Janusz Krzysztofik <jmkrzyszt@xxxxxxxxx> ARM: OMAP1: ams-delta: Fix possible use of uninitialized field Adam Ford <aford173@xxxxxxxxx> ARM: dts: logicpd-somlv: Fix interrupt on mmc3_dat1 Nathan Chancellor <natechancellor@xxxxxxxxx> ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup Stefano Brivio <sbrivio@xxxxxxxxxx> neighbour: Avoid writing before skb->head in neigh_hh_output() Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> tun: forbid iface creation with rtnl ops Yuchung Cheng <ycheng@xxxxxxxxxx> tcp: fix NULL ref in tail loss probe Eric Dumazet <edumazet@xxxxxxxxxx> rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices Christoph Paasch <cpaasch@xxxxxxxxx> net: Prevent invalid access to skb->prev in __qdisc_drop_all Heiner Kallweit <hkallweit1@xxxxxxxxx> net: phy: don't allow __set_phy_supported to add unsupported modes Tarick Bedeir <tarick@xxxxxxxxxx> net/mlx4_core: Correctly set PFC param if global pause is turned off. Su Yanjun <suyj.fnst@xxxxxxxxxxxxxx> net: 8139cp: fix a BUG triggered by changing mtu with network traffic Stefano Brivio <sbrivio@xxxxxxxxxx> ipv6: Check available headroom in ip6_xmit() even without options Jiri Wiesner <jwiesner@xxxxxxxx> ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changes ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/logicpd-som-lv.dtsi | 2 +- arch/arm/mach-omap1/board-ams-delta.c | 3 + arch/arm/mach-omap2/prm44xx.c | 2 +- arch/s390/kernel/perf_cpum_cf.c | 2 + arch/x86/kvm/lapic.c | 2 +- arch/x86/kvm/vmx.c | 8 +- drivers/gpu/drm/ast/ast_mode.c | 36 +++++++-- drivers/hwmon/ina2xx.c | 2 +- drivers/hwmon/w83795.c | 2 +- drivers/infiniband/hw/mlx5/qp.c | 19 ++--- drivers/net/ethernet/cavium/thunder/nic_main.c | 3 + drivers/net/ethernet/hisilicon/hip04_eth.c | 4 +- drivers/net/ethernet/intel/igb/e1000_i210.c | 1 + drivers/net/ethernet/intel/ixgbe/ixgbe_x550.c | 4 +- drivers/net/ethernet/mellanox/mlx4/en_ethtool.c | 4 +- drivers/net/ethernet/realtek/8139cp.c | 5 ++ drivers/net/phy/phy_device.c | 19 ++--- drivers/net/tun.c | 6 +- drivers/staging/speakup/kobjects.c | 4 +- drivers/usb/gadget/udc/omap_udc.c | 87 ++++++++-------------- drivers/xen/xlate_mmu.c | 1 + fs/btrfs/send.c | 11 ++- fs/cachefiles/rdwr.c | 9 ++- fs/exportfs/expfs.c | 2 +- fs/fscache/object.c | 3 + fs/hfs/btree.c | 3 +- fs/hfsplus/btree.c | 3 +- fs/ocfs2/export.c | 2 +- fs/ocfs2/move_extents.c | 47 ++++++------ fs/pstore/platform.c | 4 +- fs/sysv/inode.c | 2 +- include/net/neighbour.h | 28 +++++-- kernel/trace/bpf_trace.c | 8 +- lib/debugobjects.c | 3 +- net/core/rtnetlink.c | 3 + net/ipv4/ip_fragment.c | 7 ++ net/ipv4/tcp_output.c | 12 ++- net/ipv6/ip6_output.c | 42 +++++------ net/ipv6/netfilter/nf_conntrack_reasm.c | 8 +- net/ipv6/reassembly.c | 8 +- net/netfilter/ipvs/ip_vs_ctl.c | 3 + net/sched/sch_netem.c | 3 + sound/soc/omap/omap-abe-twl6040.c | 67 ++++++++--------- sound/soc/omap/omap-dmic.c | 9 +++ sound/soc/omap/omap-mcpdm.c | 43 ++++++++++- sound/soc/soc-core.c | 1 + tools/objtool/elf.c | 19 ++++- tools/testing/selftests/Makefile | 1 + tools/testing/selftests/netfilter/Makefile | 6 ++ tools/testing/selftests/netfilter/config | 2 + .../selftests/netfilter/nft_trans_stress.sh | 78 +++++++++++++++++++ 52 files changed, 439 insertions(+), 218 deletions(-)