This is the start of the stable review cycle for the 4.9.226 release. There are 59 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 04 Jun 2020 10:16:52 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.226-rc2.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.226-rc2 Benjamin Block <bblock@xxxxxxxxxxxxx> scsi: zfcp: fix request object use-after-free in send path causing wrong traces Salil Mehta <salil.mehta@xxxxxxxxxx> net: hns: Fixes the missing put_device in positive leg for roce reset Guoqing Jiang <gqjiang@xxxxxxxx> sc16is7xx: move label 'err_spi' to correct section Liviu Dudau <liviu@xxxxxxxxxxx> mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap() Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx> net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags Thomas Gleixner <tglx@xxxxxxxxxxxxx> genirq/generic_pending: Do not lose pending affinity update Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build Qiushi Wu <wu000273@xxxxxxx> bonding: Fix reference count leak in bond_sysfs_slave_add. Qiushi Wu <wu000273@xxxxxxx> qlcnic: fix missing release in qlcnic_83xx_interrupt_test. Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code Phil Sutter <phil@xxxxxx> netfilter: ipset: Fix subcounter update skip Michael Braun <michael-dev@xxxxxxxxxxxxx> netfilter: nft_reject_bridge: enable reject with bridge vlan Xin Long <lucien.xin@xxxxxxxxx> ip_vti: receive ipip packet by calling ip_tunnel_rcv Jeremy Sowden <jeremy@xxxxxxxxxx> vti4: eliminated some duplicate code. Xin Long <lucien.xin@xxxxxxxxx> xfrm: fix a NULL-ptr deref in xfrm_local_error Xin Long <lucien.xin@xxxxxxxxx> xfrm: fix a warning in xfrm_policy_insert_list Xin Long <lucien.xin@xxxxxxxxx> xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input Alexander Dahl <post@xxxxxxxxxxx> x86/dma: Fix max PFN arithmetic overflow on 32 bit systems Linus Lüssing <ll@xxxxxxxxxxxxxxxxxx> mac80211: mesh: fix discovery timer re-arming issue / crash Helge Deller <deller@xxxxxx> parisc: Fix kernel panic in mem_init() Qiushi Wu <wu000273@xxxxxxx> iommu: Fix reference count leak in iommu_group_alloc. Arnd Bergmann <arnd@xxxxxxxx> include/asm-generic/topology.h: guard cpumask_of_node() macro argument Alexander Potapenko <glider@xxxxxxxxxx> fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() Jerry Lee <leisurelysw24@xxxxxxxxx> libceph: ignore pool overlay and cache logic on redirects Eric W. Biederman <ebiederm@xxxxxxxxxxxx> exec: Always set cap_ambient in cap_bprm_set_creds Chris Chiu <chiu@xxxxxxxxxxxx> ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC Changming Liu <liu.changm@xxxxxxxxxxxxxxxx> ALSA: hwdep: fix a left shifting 1 by 31 UB bug Robert Beckett <bob.beckett@xxxxxxxxxxxxx> ARM: dts/imx6q-bx50v3: Set display interface clock parents Sebastian Reichel <sebastian.reichel@xxxxxxxxxxxxxxx> ARM: dts: imx6q-bx50v3: Add internal switch Martyn Welch <martyn.welch@xxxxxxxxxxxxxxx> ARM: dts: imx: Correct B850v3 clock assignment Kaike Wan <kaike.wan@xxxxxxxxx> IB/qib: Call kobject_put() when kobject_init_and_add() fails Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ARM: uaccess: fix DACR mismatch with nested exceptions Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ARM: uaccess: integrate uaccess_save and uaccess_restore Russell King <rmk+kernel@xxxxxxxxxxxxxxx> ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h Stefan Agner <stefan@xxxxxxxx> ARM: 8843/1: use unified assembler in headers Wei Yongjun <weiyongjun1@xxxxxxxxxx> Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() Kevin Locke <kevin@xxxxxxxxxxxxxxx> Input: i8042 - add ThinkPad S230u to i8042 reset list Łukasz Patron <priv.luk@xxxxxxxxx> Input: xpad - add custom init packet for Xbox One S controllers Brendan Shanks <bshanks@xxxxxxxxxxxxxxx> Input: evdev - call input_flush_device() on release(), not flush() James Hilliard <james.hilliard1@xxxxxxxxx> Input: usbtouchscreen - add support for BonXeon TP Steve French <stfrench@xxxxxxxxxxxxx> cifs: Fix null pointer check in cifs_read Masahiro Yamada <masahiroy@xxxxxxxxxx> usb: gadget: legacy: fix redundant initialization warnings Lei Xue <carmark.dlut@xxxxxxxxx> cachefiles: Fix race between read_waiter and read_copier involving op->to_do Bob Peterson <rpeterso@xxxxxxxxxx> gfs2: move privileged user check to gfs2_quota_lock_check Chuhong Yuan <hslester96@xxxxxxxxx> net: microchip: encx24j600: add missed kthread_stop Stephen Warren <swarren@xxxxxxxxxx> gpio: tegra: mask GPIO IRQs during IRQ shutdown Kalderon, Michal <Michal.Kalderon@xxxxxxxxxx> IB/cma: Fix reference count leak when no ipv4 addresses are set Dmitry V. Levin <ldv@xxxxxxxxxxxx> uapi: fix linux/if_pppol2tp.h userspace compilation errors Qiushi Wu <wu000273@xxxxxxx> net/mlx4_core: fix a memory leak bug. Qiushi Wu <wu000273@xxxxxxx> net: sun: fix missing release regions in cas_init_one(). Moshe Shemesh <moshe@xxxxxxxxxxxx> net/mlx5: Add command entry handling completion Manivannan Sadhasivam <manivannan.sadhasivam@xxxxxxxxxx> net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() Moshe Shemesh <moshe@xxxxxxxxxxxx> net/mlx5e: Update netdev txq on completions during closure Jere Leppänen <jere.leppanen@xxxxxxxxx> sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed Roman Mashak <mrv@xxxxxxxxxxxx> net sched: fix reporting the first-time use timestamp Yuqi Jin <jinyuqi@xxxxxxxxxx> net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" Vadim Fedorenko <vfedorenko@xxxxxxxx> net: ipip: fix wrong address family in init error path Eric Dumazet <edumazet@xxxxxxxxxx> ax25: fix setsockopt(SO_BINDTODEVICE) ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/imx6q-b450v3.dts | 7 -- arch/arm/boot/dts/imx6q-b650v3.dts | 7 -- arch/arm/boot/dts/imx6q-b850v3.dts | 11 -- arch/arm/boot/dts/imx6q-bx50v3.dtsi | 77 ++++++++++++++ arch/arm/include/asm/assembler.h | 83 +-------------- arch/arm/include/asm/uaccess-asm.h | 117 +++++++++++++++++++++ arch/arm/include/asm/vfpmacros.h | 8 +- arch/arm/kernel/entry-armv.S | 11 +- arch/arm/kernel/entry-header.S | 9 +- arch/arm/lib/bitops.h | 8 +- arch/parisc/mm/init.c | 2 +- arch/x86/include/asm/dma.h | 2 +- drivers/gpio/gpio-tegra.c | 1 + drivers/infiniband/hw/qib/qib_sysfs.c | 9 +- drivers/input/evdev.c | 19 +--- drivers/input/joystick/xpad.c | 12 +++ drivers/input/rmi4/rmi_driver.c | 3 +- drivers/input/serio/i8042-x86ia64io.h | 7 ++ drivers/input/touchscreen/usbtouchscreen.c | 1 + drivers/iommu/iommu.c | 2 +- drivers/net/bonding/bond_sysfs_slave.c | 4 +- drivers/net/ethernet/hisilicon/hns/hns_dsaf_main.c | 3 + drivers/net/ethernet/mellanox/mlx4/fw.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 15 +++ drivers/net/ethernet/mellanox/mlx5/core/en_tx.c | 6 +- drivers/net/ethernet/microchip/encx24j600.c | 5 +- .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c | 4 +- drivers/net/ethernet/sun/cassini.c | 3 +- drivers/s390/scsi/zfcp_fsf.c | 10 +- drivers/tty/serial/sc16is7xx.c | 2 + drivers/usb/gadget/legacy/inode.c | 3 +- fs/binfmt_elf.c | 2 +- fs/cachefiles/rdwr.c | 2 +- fs/cifs/file.c | 2 +- fs/gfs2/quota.c | 3 +- fs/gfs2/quota.h | 3 +- include/asm-generic/topology.h | 2 +- include/linux/mlx5/driver.h | 1 + include/linux/mm.h | 15 ++- include/linux/netfilter/nf_conntrack_pptp.h | 2 +- include/net/act_api.h | 3 +- include/rdma/ib_addr.h | 6 +- include/uapi/linux/l2tp.h | 7 +- kernel/irq/migration.c | 26 +++-- mm/vmalloc.c | 2 +- net/ax25/af_ax25.c | 6 +- net/bridge/netfilter/nft_reject_bridge.c | 6 ++ net/ceph/osd_client.c | 4 +- net/core/rtnetlink.c | 2 +- net/ipv4/ip_vti.c | 75 +++++++------ net/ipv4/ipip.c | 2 +- net/ipv4/netfilter/nf_nat_pptp.c | 7 +- net/ipv4/route.c | 14 ++- net/mac80211/mesh_hwmp.c | 7 ++ net/netfilter/ipset/ip_set_list_set.c | 2 +- net/netfilter/nf_conntrack_pptp.c | 62 ++++++----- net/qrtr/qrtr.c | 2 +- net/sctp/sm_statefuns.c | 9 +- net/xfrm/xfrm_input.c | 2 +- net/xfrm/xfrm_output.c | 3 +- net/xfrm/xfrm_policy.c | 7 +- security/commoncap.c | 1 + sound/core/hwdep.c | 4 +- sound/usb/mixer.c | 8 ++ 65 files changed, 473 insertions(+), 283 deletions(-)
