I'm announcing the release of the 4.9.136 kernel. All users of the 4.9 kernel series must upgrade. The updated 4.9.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-4.9.y and can be browsed at the normal kernel.org git web browser: http://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ Documentation/kernel-parameters.txt | 1 Makefile | 2 arch/arm/boot/compressed/efi-header.S | 4 arch/arm/boot/compressed/head.S | 17 + arch/arm/boot/dts/bcm283x.dtsi | 5 arch/arm/boot/dts/bcm63138.dtsi | 14 - arch/arm/boot/dts/imx53-qsb-common.dtsi | 11 + arch/arm/mm/ioremap.c | 2 arch/mips/include/uapi/asm/inst.h | 2 arch/mips/kernel/process.c | 11 - arch/sparc/Kconfig | 8 arch/sparc/mm/tlb.c | 19 +- arch/x86/events/intel/uncore_snbep.c | 12 - arch/x86/include/asm/fixmap.h | 10 - arch/x86/include/asm/percpu.h | 8 arch/x86/include/asm/pgtable_64.h | 3 arch/x86/kernel/cpu/cyrix.c | 1 arch/x86/kernel/head_64.S | 16 - arch/x86/kernel/paravirt.c | 4 arch/x86/kernel/time.c | 2 arch/x86/mm/pgtable.c | 9 - arch/x86/xen/mmu.c | 8 crypto/shash.c | 2 drivers/acpi/sysfs.c | 26 --- drivers/ata/ahci.c | 5 drivers/ata/libata-core.c | 2 drivers/ata/sata_rcar.c | 15 + drivers/block/nbd.c | 6 drivers/clk/samsung/clk-exynos5420.c | 2 drivers/gpio/gpio-mxs.c | 4 drivers/gpu/drm/bochs/bochs_fbdev.c | 9 - drivers/gpu/drm/drm_edid.c | 3 drivers/gpu/drm/msm/msm_gem.c | 20 +- drivers/gpu/ipu-v3/ipu-common.c | 15 - drivers/i2c/busses/i2c-bcm2835.c | 4 drivers/iio/adc/axp288_adc.c | 32 +++ drivers/iio/pressure/zpa2326.c | 10 - drivers/infiniband/core/ucm.c | 3 drivers/infiniband/core/ucma.c | 3 drivers/infiniband/core/verbs.c | 44 ++++- drivers/infiniband/hw/mlx4/mr.c | 7 drivers/infiniband/hw/mlx5/qp.c | 7 drivers/infiniband/sw/rxe/rxe_pool.c | 16 + drivers/infiniband/sw/rxe/rxe_verbs.c | 9 - drivers/infiniband/ulp/ipoib/ipoib_fs.c | 2 drivers/infiniband/ulp/ipoib/ipoib_ib.c | 20 -- drivers/input/mouse/elan_i2c_core.c | 1 drivers/mtd/spi-nor/spi-nor.c | 6 drivers/net/bonding/bond_main.c | 7 drivers/net/bonding/bond_netlink.c | 3 drivers/net/ethernet/amazon/ena/ena_netdev.c | 9 - drivers/net/ethernet/amd/declance.c | 10 - drivers/net/ethernet/broadcom/bnxt/bnxt.c | 25 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 4 drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 4 drivers/net/ethernet/cadence/macb.c | 1 drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 17 + drivers/net/ethernet/cisco/enic/enic_main.c | 9 - drivers/net/ethernet/freescale/fec_main.c | 8 drivers/net/ethernet/freescale/fs_enet/fs_enet-main.c | 16 + drivers/net/ethernet/freescale/fs_enet/fs_enet.h | 1 drivers/net/ethernet/intel/i40e/i40e_nvm.c | 98 +++++++---- drivers/net/ethernet/intel/i40e/i40e_prototype.h | 2 drivers/net/ethernet/intel/igb/e1000_82575.c | 12 - drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 6 drivers/net/ethernet/mellanox/mlx5/core/en_rx_am.c | 6 drivers/net/ethernet/mellanox/mlx5/core/health.c | 5 drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 drivers/net/ethernet/qlogic/qed/qed_hw.c | 7 drivers/net/ethernet/qlogic/qed/qed_roce.c | 15 - drivers/net/ethernet/qlogic/qed/qed_vf.c | 1 drivers/net/ethernet/qlogic/qlcnic/qlcnic.h | 26 ++- drivers/net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c | 2 drivers/net/ethernet/qlogic/qlcnic/qlcnic_main.c | 2 drivers/net/ethernet/qlogic/qlcnic/qlcnic_sriov_common.c | 2 drivers/net/ethernet/realtek/r8169.c | 8 drivers/net/ethernet/stmicro/stmmac/altr_tse_pcs.c | 6 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 3 drivers/net/ethernet/stmicro/stmmac/stmmac_mdio.c | 2 drivers/net/macsec.c | 2 drivers/net/phy/marvell.c | 2 drivers/net/usb/asix_common.c | 3 drivers/net/usb/ax88179_178a.c | 3 drivers/net/usb/cdc_ncm.c | 4 drivers/net/usb/lan78xx.c | 17 - drivers/net/usb/r8152.c | 3 drivers/net/usb/smsc75xx.c | 3 drivers/net/usb/smsc95xx.c | 3 drivers/net/usb/sr9800.c | 3 drivers/net/wireless/ath/ath10k/ahb.c | 2 drivers/net/wireless/ath/ath10k/core.c | 3 drivers/net/wireless/mac80211_hwsim.c | 3 drivers/net/wireless/marvell/libertas/if_sdio.c | 4 drivers/net/xen-netfront.c | 11 - drivers/nvme/host/pci.c | 18 -- drivers/nvme/target/admin-cmd.c | 1 drivers/pci/quirks.c | 2 drivers/platform/x86/acer-wmi.c | 9 - drivers/ptp/ptp_chardev.c | 4 drivers/reset/hisilicon/hi6220_reset.c | 2 drivers/scsi/aacraid/src.c | 2 drivers/scsi/qla2xxx/qla_init.c | 4 drivers/soc/fsl/qbman/qman.c | 3 drivers/soc/fsl/qe/ucc.c | 2 drivers/staging/wilc1000/linux_wlan.c | 3 drivers/usb/class/cdc-acm.c | 14 - drivers/usb/core/devio.c | 4 drivers/usb/dwc3/dwc3-omap.c | 18 -- drivers/usb/gadget/function/f_mass_storage.c | 3 drivers/usb/host/xhci-hub.c | 2 drivers/usb/renesas_usbhs/mod_gadget.c | 7 drivers/vhost/vhost.c | 2 drivers/video/fbdev/efifb.c | 2 drivers/video/fbdev/pxa168fb.c | 6 fs/btrfs/extent_io.c | 124 ++++++++++++++ fs/btrfs/inode.c | 2 fs/btrfs/send.c | 7 fs/cachefiles/namei.c | 2 fs/cifs/inode.c | 2 fs/f2fs/dir.c | 13 - fs/fat/fatent.c | 1 fs/ocfs2/dlmglue.c | 4 fs/ocfs2/xattr.c | 23 +- fs/orangefs/xattr.c | 6 fs/ufs/inode.c | 1 fs/xfs/libxfs/xfs_trans_resv.c | 9 - include/linux/elevator.h | 2 include/linux/iio/buffer-dma.h | 2 include/linux/posix-timers.h | 4 init/main.c | 2 kernel/events/core.c | 7 kernel/futex.c | 12 + kernel/sched/fair.c | 22 ++ kernel/sched/sched.h | 2 kernel/time/posix-cpu-timers.c | 2 kernel/time/posix-timers.c | 29 ++- lib/test_bpf.c | 2 mm/frame_vector.c | 6 mm/memory_hotplug.c | 4 net/bluetooth/mgmt.c | 7 net/bluetooth/smp.c | 29 ++- net/bluetooth/smp.h | 3 net/bridge/br_multicast.c | 9 - net/core/datagram.c | 5 net/core/ethtool.c | 8 net/core/rtnetlink.c | 10 + net/core/skbuff.c | 5 net/ipv4/ip_fragment.c | 12 - net/ipv4/udp.c | 20 ++ net/ipv6/addrconf.c | 6 net/ipv6/af_inet6.c | 6 net/ipv6/ip6_checksum.c | 20 ++ net/ipv6/ip6_tunnel.c | 14 - net/ipv6/mcast.c | 16 - net/ipv6/ndisc.c | 3 net/ipv6/netfilter/nf_conntrack_reasm.c | 2 net/ipv6/route.c | 11 - net/ipv6/xfrm6_output.c | 2 net/l2tp/l2tp_core.c | 14 - net/l2tp/l2tp_core.h | 3 net/l2tp/l2tp_debugfs.c | 4 net/l2tp/l2tp_netlink.c | 3 net/llc/llc_conn.c | 1 net/mac80211/agg-tx.c | 128 ++++++--------- net/mac80211/ht.c | 16 + net/mac80211/ieee80211_i.h | 14 - net/mac80211/iface.c | 11 - net/mac80211/sta_info.h | 2 net/mac80211/status.c | 7 net/mac80211/tdls.c | 8 net/mac80211/tx.c | 2 net/rds/ib_cm.c | 3 net/rxrpc/input.c | 54 +++--- net/sched/sch_gred.c | 2 net/sctp/socket.c | 11 - net/socket.c | 11 - net/tipc/socket.c | 6 net/tipc/subscr.c | 2 net/wireless/nl80211.c | 1 net/wireless/reg.c | 1 net/wireless/scan.c | 58 +++++- net/xfrm/xfrm_user.c | 15 + sound/pci/hda/patch_realtek.c | 5 sound/soc/intel/skylake/skl-topology.c | 2 tools/perf/Makefile | 4 tools/perf/tests/builtin-test.c | 4 tools/perf/tests/task-exit.c | 2 tools/perf/util/annotate.c | 12 + tools/perf/util/evsel.c | 12 + tools/perf/util/probe-event.c | 2 tools/virtio/ringtest/ptr_ring.c | 29 ++- 191 files changed, 1176 insertions(+), 686 deletions(-) Aditya Shankar (1): staging: wilc1000: Fix problem with wrong vif index Al Viro (2): ufs: we need to sync inode before freeing it cachefiles: fix the race between cachefiles_bury_object() and rmdir(2) Alaa Hleihel (1): IB/ipoib: Do not warn if IPoIB debugfs doesn't exist Alan Stern (1): USB: fix the usbfs flag sanitization for control transfers Alex Estrin (1): Revert "IB/ipoib: Update broadcast object if PKey value was changed in index 0" Alex Vesker (1): IB/ipoib: Fix lockdep issue found on ipoib_ib_dev_heavy_flush Alexandre Belloni (1): soc: fsl: qbman: qman: avoid allocating from non existing gen_pool Andreas Born (1): bonding: ratelimit failed speed/duplex update warning Andrei Otcheretianski (2): mac80211: Always report TX status cfg80211: reg: Init wiphy_idx in regulatory_hint_core() Andrzej Pietrasiewicz (1): clk: samsung: Fix m2m scaler clock on Exynos542x Anjali Singhai Jain (1): i40e: avoid NVM acquire deadlock during NVM update Ard Biesheuvel (2): ARM: 8677/1: boot/compressed: fix decompressor header layout for v7-M ahci: don't ignore result code of ahci_reset_controller() Arnaldo Carvalho de Melo (1): perf evsel: Fix probing of precise_ip level for default cycles event Arnd Bergmann (1): module: fix DEBUG_SET_MODULE_RONX typo Arthur Kiyanovski (1): net: ena: fix NULL dereference due to untimely napi initialization Arvind Yadav (1): ata: sata_rcar: Handle return value of clk_prepare_enable Ben Hutchings (2): scsi: qla2xxx: Avoid double completion of abort command drm/msm: Fix possible null dereference on failure of get_pages() Bjorn Helgaas (1): efi/fb: Correct PCI_STD_RESOURCE_END usage Björn Töpel (1): perf probe: Fix probe definition for inlined functions Bjørn Mork (1): net: cdc_ncm: GetNtbFormat endian fix Bob Copeland (1): mac80211: fix pending queue hang due to TX_DROP Bob Peterson (1): tipc: Fix tipc_sk_reinit handling of -EAGAIN Brian Foster (1): xfs: truncate transaction does not modify the inobt Chopra, Manish (1): qlcnic: Fix tunnel offload for 82xx adapters Christian Grönke (1): igb: Remove superfluous reset to PHY and page 0 selection Christian Sünkenberg (1): x86/cpu/cyrix: Add alternative Device ID of Geode GX1 SoC Christophe JAILLET (1): mm/frame_vector.c: release a semaphore in 'get_vaddr_frames()' Christophe Jaillet (1): IB/mlx4: Fix an error handling path in 'mlx4_ib_rereg_user_mr()' Christophe Leroy (1): net: fs_enet: do not call phy_stop() in interrupts Colin Ian King (1): net: stmmac: ensure jumbo_frm error return is correctly checked for -ve value Cong Wang (2): llc: set SOCK_RCU_FREE in llc_sap_add_socket() net: drop skb on failure in ip_check_defrag() Dag Moxnes (1): rds: ib: Fix missing call to rds_ib_dev_put in rds_ib_setup_qp Dan Carpenter (2): orangefs: off by ones in xattr size checks x86/paravirt: Fix some warning messages Daniel Mack (1): libertas: call into generic suspend code before turning off power Daniel Verkamp (1): nvmet: fix space padding in serial number David Ahern (1): net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs David Howells (2): rxrpc: Don't check RXRPC_CALL_TX_LAST after calling rxrpc_rotate_tx_window() rxrpc: Only take the rwind and mtu values from latest ACK David S. Miller (1): sparc64: Fix regression in pmdp_invalidate(). Dimitris Michailidis (1): net: fix pskb_trim_rcsum_slow() with odd trim offset Dongdong Liu (1): PCI: Disable MSI for HiSilicon Hip06/Hip07 only in Root Port mode Doug Ledford (1): IB/rxe: put the pool on allocation failure Eric Biggers (1): elevator: fix truncation of icq_cache_name Eric Dumazet (1): ipv6: mcast: fix a use-after-free in inet6_mc_check Eric Ren (1): ocfs2: fix deadlock caused by recursive locking in xattr Filipe Manana (1): Btrfs: incremental send, fix invalid memory access Florian Fainelli (8): ARM: dts: BCM63xx: Fix incorrect interrupt specifiers asix: Check for supported Wake-on-LAN modes ax88179_178a: Check for supported Wake-on-LAN modes lan78xx: Check for supported Wake-on-LAN modes sr9800: Check for supported Wake-on-LAN modes r8152: Check for supported Wake-on-LAN Modes smsc75xx: Check for Wake-on-LAN modes smsc95xx: Check for Wake-on-LAN modes Gabriel Krisman Bertazi (1): drm: bochs: Don't remove uninitialized fbdev framebuffer Gal Pressman (1): net/mlx5: Fix driver load error flow when firmware is stuck Geert Uytterhoeven (2): iio: pressure: zpa2326: Remove always-true check which confuses gcc cifs: Use ULL suffix for 64-bit constant Govindarajulu Varadarajan (1): enic: do not overwrite error code Greg Kroah-Hartman (1): Linux 4.9.136 Gustavo A. R. Silva (4): ptp: fix Spectre v1 vulnerability RDMA/ucma: Fix Spectre v1 vulnerability IB/ucm: Fix Spectre v1 vulnerability usb: gadget: storage: Fix Spectre v1 vulnerability Haishuang Yan (1): ip6_tunnel: Correct tos value in collect_md mode Hangbin Liu (1): bridge: do not add port to router list when receives query with source 0.0.0.0 Hans de Goede (1): iio: adc: Revert "axp288: Drop bogus AXP288_ADC_TS_PIN_CTRL register modifications" Heiner Kallweit (1): r8169: fix NAPI handling under high load Ido Schimmel (1): rtnetlink: Disallow FDB configuration for non-Ethernet device Jakub Kicinski (1): net: sched: gred: pass the right attribute to gred_change_table_def() James Chapman (1): l2tp: remove configurable payload offset Jane Chu (1): arch/sparc: increase CONFIG_NODES_SHIFT on SPARC64 to 5 Jason Wang (1): vhost: Fix Spectre V1 vulnerability Jeremy Linton (1): reset: hi6220: Set module license so that it can be loaded Jia-Ju Bai (2): rxe: Fix a sleep-in-atomic bug in post_one_send crypto: shash - Fix a sleep-in-atomic bug in shash_setkey_unaligned Jiri Olsa (2): perf/ring_buffer: Prevent concurent ring buffer access perf/core: Fix locking for children siblings group read Jiri Slaby (1): futex: futex_wake_op, do not fail on invalid op Johannes Berg (2): mac80211: TDLS: fix skb queue/priority assignment mac80211: fix TX aggregation start/stop callback race Josef Bacik (1): nbd: only set MSG_MORE when we have more to send Jouni Malinen (1): cfg80211: Address some corner cases in scan result channel updating Kai-Heng Feng (1): drm/edid: Add 6 bpc quirk for BOE panel in HP Pavilion 15-n233sl Kalle Valo (1): ath10k: convert warning about non-existent OTP board id to debug message Kan Liang (1): perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX Khazhismel Kumykov (1): fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters() Kimmo Rautkoski (1): mtd: spi-nor: Add support for is25wp series chips Lee, Chun-Yi (1): platform/x86: acer-wmi: setup accelerometer when ACPI device was found Linus Walleij (1): gpio: mxs: Get rid of external API call Liu Bo (1): Btrfs: clear EXTENT_DEFRAG bits in finish_ordered_io Lubomir Rintel (1): pxa168fb: prepare the clock Maciej W. Rozycki (1): declance: Fix continuation with the adapter identification message Marcelo Ricardo Leitner (1): sctp: fix race on sctp_id2asoc Marek Vasut (1): gpu: ipu-v3: Fix CSI selection for VDIC Martin Willi (1): mac80211_hwsim: do not omit multicast announce of first added radio Masashi Honma (1): nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT Mathias Nyman (1): xhci: Fix USB3 NULL pointer dereference at logical disconnect. Matias Karhumaa (1): Bluetooth: SMP: fix crash in unpairing Matt Redfearn (2): MIPS: microMIPS: Fix decoding of swsp16 instruction MIPS: Handle non word sized instructions when examining frame Max Gurtovoy (1): nvme-pci: fix CMB sysfs file removal in reset path Michael Chan (1): bnxt_en: Don't use rtnl lock to protect link change logic in workqueue. Michael S. Tsirkin (1): ptr_ring: fix up after recent ptr_ring changes Michal Simek (1): net: macb: Clean 64b dma addresses if they are not detected Mikhail Nikiforov (1): Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15IGM Mintz, Yuval (1): qed: Warn PTT usage by wrong hw-function Mohammed Shafi Shajakhan (1): ath10k: fix NAPI enable/disable symmetry for AHB interface Moshe Shemesh (2): net/mlx5: Fix command completion after timeout access invalid structure net/mlx5: Fix health work queue spin lock to IRQ safe Nathan Chancellor (3): qed: Avoid implicit enum conversion in qed_roce_mode_to_flavor qed: Avoid constant logical operation warning in qed_vf_pf_acquire x86/time: Correct the attribute on jiffies' definition Niklas Cassel (1): net: stmmac: Fix stmmac_mdio_reset() when building stmmac as modules Nikolay Aleksandrov (1): net: bridge: remove ipv6 zero address check in mcast queries Noa Osherovich (2): IB/core: Fix the validations of a multicast LID in attach or detach operations IB/mlx5: Avoid passing an invalid QP type to firmware Peter Zijlstra (1): x86/percpu: Fix this_cpu_read() Phil Auld (1): sched/fair: Fix throttle_list starvation with low CFS quota Phil Elwell (1): ARM: dts: bcm283x: Reserve first page for firmware Phil Reid (1): iio: buffer: fix the function signature to match implementation Prarit Bhargava (1): ACPI: sysfs: Make ACPI GPE mask kernel parameter cover all GPEs Qu Wenruo (1): btrfs: fiemap: Cache and merge fiemap extent before submit it to user Raghava Aditya Renukunta (1): scsi: aacraid: Fix typo in blink status Rasmus Villemoes (1): perf tools: Disable parallelism for 'make clean' Ravi Bangoria (1): perf symbols: Fix memory corruption because of zero length symbols Rickard x Andersson (1): net: fec: fix rare tx timeout Ross Lagerwall (2): xen-netfront: Update features after registering netdev xen-netfront: Fix mismatched rtnl_unlock Sabrina Dubroca (2): ipv6: fix cleanup ordering for ip6_mr failure macsec: fix memory leaks when skb_to_sgvec fails Sandipan Das (1): perf tests: Fix indexing when invoking subtests Sascha Hauer (1): ARM: dts: imx53-qsb: disable 1.2GHz OPP Sasha Levin (2): Revert "netfilter: ipv6: nf_defrag: drop skb dst before queueing" Revert "x86/mm: Expand static page table for fixmap space" Sean Tranchetti (2): xfrm: validate template mode net: udp: fix handling of CHECKSUM_COMPLETE packets Sheng Yong (1): f2fs: fix multiple f2fs_add_link() having same name for inline dentry Shreyas NC (1): ASoC: Intel: Skylake: Fix to parse consecutive string tkns in manifest Stefan Wahren (1): i2c: bcm2835: Avoid possible NULL ptr dereference Stefano Brivio (2): ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called ip6_tunnel: Fix encapsulation layout Steffen Klassert (1): xfrm: Validate address prefix lengths in the xfrm selector. Takashi Iwai (2): ALSA: hda - No loopback on ALC299 codec ALSA: hda - Fix incorrect usage of IS_REACHABLE() Talat Batheesh (1): net/mlx5e: Fix fixpoint divide exception in mlx5e_am_stats_compare Tejun Heo (1): libata: fix error checking in in ata_parse_force_one() Thadeu Lima de Souza Cascardo (2): xfrm6: call kfree_skb when skb is toobig test_bpf: Fix testing with CONFIG_BPF_JIT_ALWAYS_ON=y on other arches Thomas Gleixner (1): posix-timers: Sanitize overrun handling Thomas Petazzoni (1): ARM: 8799/1: mm: fix pci_ioremap_io() offset check Thor Thayer (1): net: ethernet: stmmac: Fix altr_tse_pcs SGMII Initialization Tobias Herzog (1): cdc-acm: correct counting of UART states in serial state notification Tobias Jungel (1): bonding: fix length of actor system Vignesh R (1): usb: dwc3: omap: remove IRQ_NOAUTOEN used with shared irq Wenwen Wang (3): net: cxgb3_main: fix a missing-check bug net: socket: fix a missing-check bug ethtool: fix a privilege escalation bug Xin Long (2): ipv6: set rt6i_protocol properly in the route when it is installed sctp: use right member as the param of list_for_each_entry Ying Xue (1): tipc: fix a race condition of releasing subscriber object Yoshihiro Shimoda (2): usb: renesas_usbhs: gadget: fix spin_lock_init() for &uep->lock usb: renesas_usbhs: gadget: fix unused-but-set-variable warning Zhao Qiang (2): soc: fsl: qe: Fix copy/paste bug in ucc_get_tdm_sync_shift() net: phy: marvell: Limit 88m1101 autoneg errata to 88E1145 as well. zhong jiang (1): mm/memory_hotplug.c: fix overflow in test_pages_in_a_zone()