Zesty update to v4.9.3 stable release

[Tim Gardner]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The v4.9.3 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches from the v4.9.3 stable release shall be applied:

iio: common: st_sensors: fix channel data parsing
iio: max44000: correct value in illuminance_integration_time_available
iio: bmi160: Fix time needed to sleep after command execution
staging: octeon: Call SET_NETDEV_DEV()
ALSA: hda - Fix up GPIO for ASUS ROG Ranger
ALSA: hda - Apply asus-mode8 fixup to ASUS X71SL
ALSA: usb-audio: Fix irq/process data synchronization
fscrypt: fix renaming and linking special files
parisc: Add line-break when printing segfault info
parisc: Mark cr16 clocksource unstable on SMP systems
HID: sensor-hub: Move the memset to sensor_hub_get_feature()
ARM: davinci: da850: don't add emac clock to lookup table twice
pinctrl/amd: Set the level based on ACPI tables
mac80211: initialize fast-xmit 'info' later
asm-prototypes: Clear any CPP defines before declaring the functions
gcc-plugins: update gcc-common.h for gcc-7
drm/i915: Fix oopses in the overlay code due to i915_gem_active stuff
drm/i915: Fix oops in overlay due to frontbuffer tracking
drm/i915: Force VDD off on the new power seqeuencer before starting to use it
drm/i915: Initialize overlay->last_flip properly
KVM: x86: reset MMU on KVM_SET_VCPU_EVENTS
KVM: MIPS: Don't clobber CP0_Status.UX
KVM: MIPS: Flush KVM entry code from icache globally
usb: musb: core: add clear_ep_rxintr() to musb_platform_ops
usb: musb: dsps: implement clear_ep_rxintr() callback
usb: storage: unusual_uas: Add JMicron JMS56x to unusual device
usb: gadgetfs: restrict upper bound on device configuration size
USB: gadgetfs: fix unbounded memory allocation bug
USB: gadgetfs: fix use-after-free bug
USB: gadgetfs: fix checks of wTotalLength in config descriptors
USB: fix problems with duplicate endpoint addresses
USB: dummy-hcd: fix bug in stop_activity (handle ep0)
usb: gadget: composite: Test get_alt() presence instead of set_alt()
usb: dwc3: core: avoid Overflow events
usb: xhci: fix possible wild pointer
usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake
xhci: free xhci virtual devices with leaf nodes first
usb: xhci: fix return value of xhci_setup_device()
usb: host: xhci: Fix possible wild pointer when handling abort command
xhci: Handle command completion and timeout race
usb: xhci: hold lock over xhci_abort_cmd_ring()
usb: return error code when platform_get_irq fails
USB: serial: omninet: fix NULL-derefs at open and disconnect
USB: serial: quatech2: fix sleep-while-atomic in close
USB: serial: pl2303: fix NULL-deref at open
USB: serial: keyspan_pda: verify endpoints at probe
USB: serial: spcp8x5: fix NULL-deref at open
USB: serial: io_ti: fix NULL-deref at open
USB: serial: io_ti: fix another NULL-deref at open
USB: serial: io_ti: fix I/O after disconnect
USB: serial: iuu_phoenix: fix NULL-deref at open
USB: serial: garmin_gps: fix memory leak on failed URB submit
USB: serial: ti_usb_3410_5052: fix NULL-deref at open
USB: serial: io_edgeport: fix NULL-deref at open
USB: serial: oti6858: fix NULL-deref at open
USB: serial: cyberjack: fix NULL-deref at open
USB: serial: kobil_sct: fix NULL-deref in write
USB: serial: mos7840: fix NULL-deref at open
USB: serial: mos7720: fix NULL-deref at open
USB: serial: mos7720: fix use-after-free on probe errors
USB: serial: mos7720: fix parport use-after-free on probe errors
USB: serial: mos7720: fix parallel probe
usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL
xhci: Use delayed_work instead of timer for command timeout
xhci: Fix race related to abort operation
usb: dwc3: pci: add Intel Gemini Lake PCI ID
usb: dwc3: pci: Fix dr_mode misspelling
usb: dwc3: gadget: Fix full speed mode
usb: musb: Fix trying to free already-free IRQ 4
usb: hub: Move hub_port_disable() to fix warning if PM is disabled
usb: gadget: udc: core: fix return code of usb_gadget_probe_driver()
usb: musb: blackfin: add bfin_fifo_offset in bfin_ops
ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream()
USB: serial: kl5kusb105: abort on open exception path
usb: gadget: Fix second argument of percpu_ida_alloc()
usb: gadget: fix request length error for isoc transfer
ARM: dts: r8a7794: Correct hsusb parent clock
USB: phy: am335x-control: fix device and of_node leaks
arm64: dts: hip06: Correct hardware pin number of usb node
ARM: dts: sun7i: bananapi-m1-plus: Enable USB PHY for USB host support
dibusb: fix possible memory leak in dibusb_rc_query()
USB: serial: io_ti: bind to interface after fw download
mei: fix parameter rename KDoc
mei: bus: fix mei_cldev_enable KDoc
mei: move write cb to completion on credentials failures
staging: iio: ad7606: fix improper setting of oversampling pins
iio: accel: st_accel: fix LIS3LV02 reading and scaling
usb: dwc3: ep0: add dwc3_ep0_prepare_one_trb()
usb: dwc3: ep0: explicitly call dwc3_ep0_prepare_one_trb()
usb: dwc3: gadget: always unmap EP0 requests
drm/i915/dp: add lane_count check in intel_dp_check_link_status
drm/i915: tune down the fast link training vs boot fail
mac80211: fix tid_agg_rx NULL dereference
nl80211: Use different attrs for BSSID and random MAC addr in scan req
ath10k: fix failure to send NULL func frame for 10.4
mfd: tps65217: Fix page fault on unloading modules
ath10k: use the right length of "background"
cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected
efi/efivar_ssdt_load: Don't return success on allocation failure
clk: renesas: cpg-mssr: Fix inverted debug check
debugfs: improve DEFINE_DEBUGFS_ATTRIBUTE for !CONFIG_DEBUG_FS
x86/prctl/uapi: Remove #ifdef for CHECKPOINT_RESTORE
x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6
platform/x86: fujitsu-laptop: use brightness_set_blocking for LED-setting callbacks
hwmon: (scpi) Fix module autoload
hwmon: (amc6821) sign extension temperature
hwmon: (ds620) Fix overflows seen when writing temperature limits
hwmon: (nct7802) Fix overflows seen when writing into limit attributes
hwmon: (g762) Fix overflows and crash seen when writing limit attributes
hwmon: (lm90) fix temp1_max_alarm attribute
Input: synaptics-rmi4 - unlock on error
clk: qcom: ipq806x: Fix board clk rates
clk: clk-wm831x: fix a logic error
clk: ti: dra7: fix "failed to lookup clock node gmac_gmii_ref_clk_div" boot message
clk: sunxi-ng: sun8i-a23: Set CLK_SET_RATE_PARENT for audio module clocks
clk: sunxi-ng: sun8i-h3: Set CLK_SET_RATE_PARENT for audio module clocks
clk: imx31: fix rewritten input argument of mx31_clocks_init()
clk: renesas: mstp: Support 8-bit registers for r7s72100
iommu/amd: Missing error code in amd_iommu_init_device()
iommu/amd: Fix the left value check of cmd buffer
iommu/vt-d: Fix pasid table size encoding
iommu/vt-d: Flush old iommu caches for kdump when the device gets context mapped
ASoC: lpass-platform: initialize dma channel number
ASoC: cht_bsw_rt5645: Fix leftover kmalloc
ASoC: Intel: Skylake: Fix a shift wrapping bug
ASoC: samsung: i2s: Fixup last IRQ unsafe spin lock call
scsi: g_NCR5380: Fix release_region in error handling
scsi: mvsas: fix command_active typo
target/iscsi: Fix double free in lio_target_tiqn_addtpg()
sbp-target: Fix second argument of percpu_ida_alloc()
relay: check array offset before using it
ima: fix memory leak in ima_release_policy
PCI/MSI: Check for NULL affinity mask in pci_irq_get_affinity()
irqchip/bcm7038-l1: Implement irq_cpu_offline() callback
PM / wakeirq: Fix dedicated wakeirq for drivers not using autosuspend
genirq/affinity: Fix node generation from cpumask
mmc: mmc_test: Uninitialized return value
rpmsg: qcom_smd: Correct return value for O_NONBLOCK
mm/hugetlb.c: use the right pte val for compare in hugetlb_cow
docs-rst: fix LaTeX DURole renewcommand with Sphinx 1.3+
mm: khugepaged: close use-after-free race during shmem collapsing
mm: khugepaged: fix radix tree node leak in shmem collapse error path
mm, compaction: fix NR_ISOLATED_* stats for pfn based migration
s390/crypto: unlock on error in prng_tdes_read()
crypto: arm64/sha2-ce - fix for big endian
crypto: arm64/ghash-ce - fix for big endian
crypto: arm/aes-ce - fix for big endian
crypto: arm64/aes-ccm-ce: fix for big endian
crypto: arm64/aes-neon - fix for big endian
crypto: arm64/sha1-ce - fix for big endian
crypto: arm64/aes-xts-ce: fix for big endian
crypto: arm64/aes-ce - fix for big endian
md: MD_RECOVERY_NEEDED is set for mddev->recovery
md: fix refcount problem on mddev when stopping array.
f2fs: remove percpu_count due to performance regression
f2fs: hide a maybe-uninitialized warning
staging: media: davinci_vpfe: unlock on error in vpfe_reqbufs()
PCI: rockchip: Fix negotiated lanes calculation
PCI: rockchip: Correct the use of FTS mask
PCI: Add Mellanox device IDs
PCI: Convert broken INTx masking quirks from HEADER to FINAL
PCI: Convert Mellanox broken INTx quirks to be for listed devices only
PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
PCI: Enable access to non-standard VPD for Chelsio devices (cxgb3)
powerpc/pci/rpadlpar: Fix device reference leaks
s390/topology: always use s390 specific sched_domain_topology_level
s390/pci: fix dma address calculation in map_sg
drm/radeon: Always store CRTC relative radeon_crtc->cursor_x/y values
drm/i915: disable PSR by default on HSW/BDW
drm/i915/gen9: unconditionally apply the memory bandwidth WA
drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
tpm_tis: Check return values from get_burstcount.
xfs: don't call xfs_sb_quota_from_disk twice
xfs: check return value of _trans_reserve_quota_nblks
xfs: don't skip cow forks w/ delalloc blocks in cowblocks scan
xfs: don't BUG() on mixed direct and mapped I/O
xfs: provide helper for counting extents from if_bytes
xfs: check minimum block size for CRC filesystems
xfs: fix unbalanced inode reclaim flush locking
xfs: new inode extent list lookup helpers
xfs: factor rmap btree size into the indlen calculations
xfs: always succeed when deduping zero bytes
xfs: remove prev argument to xfs_bmapi_reserve_delalloc
xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
xfs: use new extent lookup helpers in __xfs_reflink_reserve_cow
xfs: clean up cow fork reservation and tag inodes correctly
xfs: use new extent lookup helpers xfs_file_iomap_begin_delay
xfs: pass post-eof speculative prealloc blocks to bmapi
xfs: Move AGI buffer type setting to xfs_read_agi
xfs: pass state not whichfork to trace_xfs_extlist
xfs: handle cow fork in xfs_bmap_trace_exlist
xfs: forbid AG btrees with level == 0
xfs: check for bogus values in btree block headers
xfs: complain if we don't get nextents bmap records
xfs: don't crash if reading a directory results in an unexpected hole
xfs: error out if trying to add attrs and anextents > 0
xfs: don't allow di_size with high bit set
xfs: don't cap maximum dedupe request length
xfs: ignore leaf attr ichdr.count in verifier during log replay
xfs: use GPF_NOFS when allocating btree cursors
xfs: fix double-cleanup when CUI recovery fails
xfs: use the actual AG length when reserving blocks
xfs: fix crash and data corruption due to removal of busy COW extents
xfs: fix max_retries _show and _store functions
clocksource/dummy_timer: Move hotplug callback after the real timers
tick/broadcast: Prevent NULL pointer dereference
Revert "rtlwifi: Fix enter/exit power_save"
Revert "usb: gadget: composite: always set ep->mult to a sensible value"
usb: gadget: composite: always set ep->mult to a sensible value
Linux 4.9.3

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.9.0-15.16

---------------
linux (4.9.0-15.16) zesty; urgency=low

  [ Tim Gardner ]

  * Release Tracking Bug
    - LP: #1658101

  * Zesty update to v4.9.5 stable release (LP: #1658099)
    - Input: xpad - use correct product id for x360w controllers
    - Input: i8042 - add Pegatron touchpad to noloop table
    - pinctrl: imx: fix imx_pinctrl_desc initialization
    - pinctrl: sh-pfc: r8a7795: Use lookup function for bias data
    - pinctrl: sh-pfc: Add helper to handle bias lookup table
    - regulator: tps65086: Fix 25mV ranges for BUCK regulators
    - regulator: axp20x: Fix axp809 ldo_io registration error on cold boot
    - drm/tegra: dpaux: Fix error handling
    - drm/vc4: Fix a couple error codes in vc4_cl_lookup_bos()
    - drm/savage: dereferencing an error pointer
    - selftests: do not require bash to run netsocktests testcase
    - selftests: do not require bash for the generated test
    - zram: revalidate disk under init_lock
    - zram: support BDI_CAP_STABLE_WRITES
    - dax: fix deadlock with DAX 4k holes
    - mm: pmd dirty emulation in page fault handler
    - mm: fix devm_memremap_pages crash, use mem_hotplug_{begin, done}
    - ocfs2: fix crash caused by stale lvb with fsdlm plugin
    - mm, memcg: fix the active list aging for lowmem requests when memcg is enabled
    - mm: support anonymous stable page
    - mm/slab.c: fix SLAB freelist randomization duplicate entries
    - mm/hugetlb.c: fix reservation race when freeing surplus pages
    - KVM: x86: fix emulation of "MOV SS, null selector"
    - KVM: eventfd: fix NULL deref irqbypass consumer
    - jump_labels: API for flushing deferred jump label updates
    - KVM: x86: flush pending lapic jump label updates on module unload
    - KVM: x86: fix NULL deref in vcpu_scan_ioapic
    - KVM: x86: add Align16 instruction flag
    - KVM: x86: add asm_safe wrapper
    - KVM: x86: emulate FXSAVE and FXRSTOR
    - KVM: x86: Introduce segmented_write_std
    - efi/libstub/arm*: Pass latest memory map to the kernel
    - efi/x86: Prune invalid memory map entries and fix boot regression
    - x86/efi: Don't allocate memmap through memblock after mm_init()
    - nl80211: fix sched scan netlink socket owner destruction
    - gpio: Move freeing of GPIO hogs before numbing of the device
    - xfs: Timely free truncated dirty pages
    - bridge: netfilter: Fix dropping packets that moving through bridge interface
    - x86/cpu/AMD: Clean up cpu_llc_id assignment per topology feature
    - x86/bugs: Separate AMD E400 erratum and C1E bug
    - x86/CPU/AMD: Fix Bulldozer topology
    - wusbcore: Fix one more crypto-on-the-stack bug
    - usb: musb: fix runtime PM in debugfs
    - USB: serial: kl5kusb105: fix line-state error handling
    - USB: serial: ch341: fix initial modem-control state
    - USB: serial: ch341: fix resume after reset
    - USB: serial: ch341: fix open error handling
    - USB: serial: ch341: fix control-message error handling
    - USB: serial: ch341: fix open and resume after B0
    - Input: elants_i2c - avoid divide by 0 errors on bad touchscreen data
    - i2c: print correct device invalid address
    - i2c: fix kern...