Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752595AbdGPOfl (ORCPT ); Sun, 16 Jul 2017 10:35:41 -0400 Received: from shadbolt.e.decadent.org.uk ([88.96.1.126]:44258 "EHLO shadbolt.e.decadent.org.uk" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752679AbdGPOO1 (ORCPT ); Sun, 16 Jul 2017 10:14:27 -0400 Content-Type: text/plain; charset="UTF-8" Content-Disposition: inline Content-Transfer-Encoding: 8bit MIME-Version: 1.0 From: Ben Hutchings To: linux-kernel@vger.kernel.org, stable@vger.kernel.org CC: torvalds@linux-foundation.org, Guenter Roeck , akpm@linux-foundation.org Date: Sun, 16 Jul 2017 14:56:44 +0100 Message-ID: X-Mailer: LinuxStableQueue (scripts by bwh) Subject: [PATCH 3.16 000/178] 3.16.46-rc1 review X-SA-Exim-Connect-IP: 2a02:8011:400e:2:6f00:88c8:c921:d332 X-SA-Exim-Mail-From: ben@decadent.org.uk X-SA-Exim-Scanned: No (on shadbolt.decadent.org.uk); SAEximRunCond expanded to false Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 34059 Lines: 787 This is the start of the stable review cycle for the 3.16.46 release. There are 178 patches in this series, which will be posted as responses to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Tue Jul 18 13:56:44 UTC 2017. Anything received after that time might be too late. A combined patch relative to 3.16.45 will be posted as an additional response to this. A shortlog and diffstat can be found below. Ben. ------------- Adrian Hunter (1): mmc: sdhci: Do not disable interrupts while waiting for clock [e2ebfb2142acefecc2496e71360f50d25726040b] Al Viro (1): p9_client_readdir() fix [71d6ad08379304128e4bdfaf0b4185d54375423e] Alan Stern (1): USB: fix linked-list corruption in rh_call_control() [1633682053a7ee8058e10c76722b9b28e97fb73f] Alexey Kodanev (1): udp: avoid ufo handling on IP payload compression packets [4b3b45edba9222e518a1ec72df841eba3609fe34] Andrey Ulanov (1): net: unix: properly re-increment inflight counter of GC discarded candidates [7df9c24625b9981779afb8fcdbe2bb4765e61147] Andy Shevchenko (1): x86/platform/intel-mid: Correct MSI IRQ line for watchdog device [80354c29025833acd72ddac1ffa21c6cb50128cd] Ankur Arora (1): xen/acpi: upload PM state from init-domain to Xen [1914f0cd203c941bba72f9452c8290324f1ef3dc] Anssi Hannula (1): mmc: sdhci-of-arasan: fix incorrect timeout clock [16681037e75ce08f2980ac5dbb03414429c7a55d] Anton Blanchard (1): scsi: lpfc: Add shutdown method for kexec [85e8a23936ab3442de0c42da97d53b29f004ece1] Arnd Bergmann (4): ACPI / power: Avoid maybe-uninitialized warning [fe8c470ab87d90e4b5115902dd94eced7e3305c3] IB/qib: fix false-postive maybe-uninitialized warning [f6aafac184a3e46e919769dd4faa8bf0dc436534] hwmon: (asus_atk0110) fix uninitialized data access [a2125d02443e9a4e68bcfd9f8004fa23239e8329] virtio_balloon: prevent uninitialized variable use [f0bb2d50dfcc519f06f901aac88502be6ff1df2c] Ben Hutchings (1): cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores [4cca0457686e4ee1677d69469e4ddfd94d389a80] Benjamin Herrenschmidt (1): powerpc: Disable HFSCR[TM] if TM is not supported [7ed23e1bae8bf7e37fd555066550a00b95a3a98b] Bjørn Mork (1): USB: serial: qcserial: add Dell DW5811e [436ecf5519d892397af133a79ccd38a17c25fa51] Bsegall@Google.Com (1): ptrace: fix PTRACE_LISTEN race corrupting task->state [5402e97af667e35e54177af8f6575518bf251d51] Chris Leech (1): scsi: libiscsi: add lock around task lists to fix list corruption regression [6f8830f5bbab16e54f261de187f3df4644a5b977] Christian Borntraeger (1): s390/mm: fix CMMA vs KSM vs others [a8f60d1fadf7b8b54449fcc9d6b15248917478ba] Dan Carpenter (2): bna: integer overflow bug in debugfs [13e2d5187f6b965ba3556caedb914baf81b98ed2] net: tc35815: move free after the dereference [11faa7b0359aaf7efd406b7a6a077fda2b037d8e] Dan Streetman (1): xen: do not re-use pirq number cached in pci device msi msg data [c74fd80f2f41d05f350bb478151021f88551afe8] Dan Williams (1): USB: serial: option: add Quectel UC15, UC20, EC21, and EC25 modems [6e9f44eaaef0df7b846e9316fa9ca72a02025d44] Daniel Borkmann (2): bpf: try harder on clones when writing into skb [3697649ff29e0f647565eed04b27a7779c646a22] perf symbols: Fix symbols__fixup_end heuristic for corner cases [e7ede72a6d40cb3a30c087142d79381ca8a31dab] David Ahern (2): net: ipv6: send unsolicited NA if enabled for all interfaces [fc1f8f4f310ac65b1337e2d7ba52ae4ff2b7c849] net: ipv6: set route type for anycast routes [4ee39733fbecf04cf9f346de2d64788c35028079] David Hildenbrand (1): KVM: kvm_io_bus_unregister_dev() should never fail [90db10434b163e46da413d34db8d0e77404cc645] David Howells (1): KEYS: Change the name of the dead type to ".dead" to prevent user access [c1644fe041ebaf6519f6809146a77c3ead9193af] Dmitry Torokhov (1): Input: i8042 - add Clevo P650RS to the i8042 reset list [7c5bb4ac2b76d2a09256aec8a7d584bf3e2b0466] Doug Berger (4): net: bcmgenet: Power up the internal PHY before probing the MII [6be371b053dc86f11465cc1abce2e99bda0a0574] net: bcmgenet: correct MIB access of UniMAC RUNT counters [1ad3d225e5a40ca6c586989b4baaca710544c15a] net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values [ffff71328a3c321f7c14cc1edd33577717037744] net: bcmgenet: synchronize irq0 status between the isr and task [07c52d6a0b955a8a28834f9354793cfc4b81d0e9] Edwin Chan (1): net: bcmgenet: add begin/complete ethtool ops [89316fa34ab8afac8d693f41a5bc268673f1da15] Eric Biggers (1): ext4: mark inode dirty after converting inline directory [b9cf625d6ecde0d372e23ae022feead72b4228a6] Eric Dumazet (5): cx82310_eth: use skb_cow_head() to deal with cloned skbs [a9e840a2081ed28c2b7caa6a9a0041c950b3c37d] net: properly release sk_frag.page [22a0e18eac7a9e986fec76c60fa4a2926d1291e2] sch_dsmark: fix invalid skb_cow() usage [aea92fb2e09e29653b023d4254ac9fbf94221538] smsc75xx: use skb_cow_head() to deal with cloned skbs [b7c6d2675899cfff0180412c63fc9cbd5bacdb4d] sr9700: use skb_cow_head() to deal with cloned skbs [d532c1082f68176363ed766d09bf187616e282fe] Felipe Balbi (2): usb: dwc3: gadget: make Set Endpoint Configuration macros safe [7369090a9fb57c3fc705ce355d2e4523a5a24716] usb: gadget: function: f_fs: pass companion descriptor along [2bfa0719ac2a9b2f3c91345873d3cdebd0296ba9] Florian Fainelli (1): net: phy: Do not perform software reset for Generic PHY [0878fff1f42c18e448ab5b8b4f6a3eb32365b5b6] Florian Westphal (1): xfrm: policy: init locks early [c282222a45cb9503cbfbebfdb60491f06ae84b49] Gao Feng (1): netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to register [75c689dca98851d65ef5a27e5ce26b625b68751c] Germano Percossi (1): CIFS: remove bad_network_name flag [a0918f1ce6a43ac980b42b300ec443c154970979] Guenter Roeck (1): usb: hub: Fix crash after failure to read BOS descriptor [7b2db29fbb4e766fcd02207eb2e2087170bd6ebc] Guillaume Nault (8): l2tp: don't mask errors in pppol2tp_getsockopt() [321a52a39189d5e4af542f7dcdc07bba4545cf5d] l2tp: don't mask errors in pppol2tp_setsockopt() [364700cf8fd54f54ad08313464105a414e3bccb7] l2tp: ensure session can't get removed during pppol2tp_session_ioctl() [57377d63547861919ee634b845c7caa38de4a452] l2tp: fix duplicate session creation [dbdbc73b44782e22b3b4b6e8b51e7a3d245f3086] l2tp: fix race in l2tp_recv_common() [61b9a047729bb230978178bca6729689d0c50ca2] l2tp: purge socket queues in the .destruct() callback [e91793bb615cf6cdd59c0b6749fe173687bb0947] l2tp: take a reference on sessions used in genetlink handlers [2777e2ab5a9cf2b4524486c6db1517a6ded25261] l2tp: take reference on sessions being dumped [e08293a4ccbcc993ded0fdc46f1e57926b833d63] Hans de Goede (1): mmc: sdhci: Disable runtime pm when the sdio_irq is enabled [923713b357455cfb9aca2cd3429cb0806a724ed2] Heiko Carstens (1): s390/uaccess: get_user() should zero on failure (again) [d09c5373e8e4eaaa09233552cbf75dc4c4f21203] Herbert Xu (1): macvlan: Fix device ref leak when purging bc_queue [f6478218e6edc2a587b8f132f66373baa7b2497c] Horia Geantă (1): crypto: caam - fix RNG deinstantiation error checking [40c98cb57cdbc377456116ad4582c89e329721b0] Ilya Dryomov (2): libceph: don't set weight to IN when OSD is destroyed [b581a5854eee4b7851dedb0f8c2ceb54fb902c06] libceph: force GFP_NOIO for socket allocations [633ee407b9d15a75ac9740ba9d3338815e1fcb95] James Hogan (8): MIPS: KGDB: Use kernel context for sleeping threads [162b270c664dca2e0944308e92f9fcc887151a72] metag/usercopy: Add early abort to copy_to_user [fb8ea062a8f2e85256e13f55696c5c5f0dfdcc8b] metag/usercopy: Add missing fixups [b884a190afcecdbef34ca508ea5ee88bb7c77861] metag/usercopy: Drop unused macros [ef62a2d81f73d9cddef14bc3d9097a57010d551c] metag/usercopy: Fix alignment error checking [2257211942bbbf6c798ab70b487d7e62f7835a1a] metag/usercopy: Fix src fixup in from user rapf loops [2c0b1df88b987a12d95ea1d6beaf01894f3cc725] metag/usercopy: Set flags before ADDZ [fd40eee1290ad7add7aa665e3ce6b0f9fe9734b4] metag/usercopy: Zero rest of buffer from copy_from_user [563ddc1076109f2b3f88e6d355eab7b6fd4662cb] James Morse (1): ACPI / APEI: Add missing synchronize_rcu() on NOTIFY_SCI removal [7d64f82cceb21e6d95db312d284f5f195e120154] Jan Beulich (1): xen-blkback: don't leak stack data via response ring [089bc0143f489bd3a4578bdff5f4ca68fb26f341] Jan-Marek Glogowski (1): Reset TreeId to zero on SMB2 TREE_CONNECT [806a28efe9b78ffae5e2757e1ee924b8e50c08ab] Janosch Frank (1): KVM: s390: Fix guest migration for huge guests resulting in panic [2e4d88009f57057df7672fa69a32b5224af54d37] Joerg Roedel (1): ACPI: Do not create a platform_device for IOAPIC/IOxAPIC [08f63d97749185fab942a3a47ed80f5bd89b8b7d] Johan Hovold (20): Input: cm109 - validate number of endpoints before using them [ac2ee9ba953afe88f7a673e1c0c839227b1d7891] Input: hanwang - validate number of endpoints before using them [ba340d7b83703768ce566f53f857543359aa1b98] Input: iforce - validate number of endpoints before using them [59cf8bed44a79ec42303151dd014fdb6434254bb] Input: ims-pcu - validate number of endpoints before using them [1916d319271664241b7aa0cd2b05e32bdb310ce9] Input: kbtab - validate number of endpoints before using them [cb1b494663e037253337623bf1ef2df727883cb7] Input: sur40 - validate number of endpoints before using them [92461f5d723037530c1f36cce93640770037812c] Input: yealink - validate number of endpoints before using them [5cc4a1a9f5c179795c8a1f2b0f4361829d6a070e] USB: idmouse: fix NULL-deref at probe [b0addd3fa6bcd119be9428996d5d4522479ab240] USB: iowarrior: fix NULL-deref in write [de46e56653de7b3b54baa625bd582635008b8d05] USB: serial: digi_acceleport: fix OOB-event processing [2e46565cf622dd0534a9d8bffe152a577b48d7aa] USB: serial: io_ti: fix NULL-deref in interrupt callback [0b1d250afb8eb9d65afb568bac9b9f9253a82b49] USB: serial: safe_serial: fix information leak in completion handler [8c76d7cd520ebffc1ea9ea0850d87a224a50c7f2] USB: usbtmc: add missing endpoint sanity check [687e0687f71ec00e0132a21fef802dee88c2f1ad] USB: uss720: fix NULL-deref at probe [f259ca3eed6e4b79ac3d5c5c9fb259fb46e86217] USB: wusbcore: fix NULL-deref at probe [03ace948a4eb89d1cf51c06afdfc41ebca5fdb27] isdn/gigaset: fix NULL-deref at probe [68c32f9c2a36d410aa242e661506e5b2c2764179] mmc: ushc: fix NULL-deref at probe [181302dc7239add8ab1449c23ecab193f52ee6ab] net: wimax/i2400m: fix NULL-deref at probe [6e526fdff7be4f13b24f929a04c0e9ae6761291e] uwb: hwa-rc: fix NULL-deref at probe [daf229b15907fbfdb6ee183aac8ca428cb57e361] uwb: i1480-dfu: fix NULL-deref at probe [4ce362711d78a4999011add3115b8f4b0bc25e8c] Johannes Berg (2): mac80211: reject ToDS broadcast data frames [3018e947d7fd536d57e2b550c33e456d921fff8c] nl80211: fix dumpit error path RTNL deadlocks [ea90e0dc8cecba6359b481e24d9c37160f6f524f] John Garry (1): scsi: libsas: fix ata xfer length [9702c67c6066f583b629cf037d2056245bb7a8e6] Jon Mason (1): ARM: dts: BCM5301X: Correct GIC_PPI interrupt flags [0c2bf9f95983fe30aa2f6463cb761cd42c2d521a] Jon Maxwell (1): dccp/tcp: fix routing redirect race [45caeaa5ac0b4b11784ac6f932c0ad4c6b67cda0] Josh Poimboeuf (2): ACPI: Fix incompatibility with mcount-based function graph tracing [61b79e16c68d703dde58c25d3935d67210b7d71b] ftrace/x86: Fix triple fault with graph tracing and suspend-to-ram [34a477e5297cbaa6ecc6e17c042a866e1cbe80d6] Juergen Gross (1): xen, fbfront: fix connecting to backend [9121b15b5628b38b4695282dc18c553440e0f79b] Kai-Heng Feng (1): Input: i8042 - add noloop quirk for Dell Embedded Box PC 3000 [45838660e34d90db8d4f7cbc8fd66e8aff79f4fe] Kees Cook (2): fs/exec.c: account for argv/envp pointers [98da7d08850fb8bdeb395d6368ed15753304aa0c] mm: Tighten x86 /dev/mem with zeroing reads [a4866aa812518ed1a37d8ea0c881dc946409de94] Kinglong Mee (1): NFSv4: fix a reference leak caused WARNING messages [366a1569bff3fe14abfdf9285e31e05e091745f5] Ladi Prosek (1): virtio_balloon: init 1st buffer in stats vq [fc8653228c8588a120f6b5dad6983b7b61ff669e] Laurent Pinchart (1): usb: gadget: uvc: Fix endianness mismatches [e102609f107269fbc04af21548e78e99c02b6204] Maor Gottlieb (1): net/mlx5: Increase number of max QPs in default profile [5f40b4ed975c26016cf41953b7510fe90718e21c] Marcelo Henrique Cerri (1): s390/decompressor: fix initrd corruption caused by bss clear [d82c0d12c92705ef468683c9b7a8298dd61ed191] Martin K. Petersen (2): scsi: sd: Fix capacity calculation with 32-bit sector_t [7c856152cb92f8eee2df29ef325a1b1f43161aff] scsi: sr: Sanity check returned mode data [a00a7862513089f17209b732f230922f1942e0b9] Masami Hiramatsu (1): kprobes/x86: Fix kernel panic when certain exception-handling addresses are probed [75013fb16f8484898eaa8d0b08fed942d790f029] Mathias Krause (1): x86/vdso: Ensure vdso32_enabled gets set to valid values only [c06989da39cdb10604d572c8c7ea8c8c97f3c483] Mathias Nyman (1): xhci: Manually give back cancelled URB if we can't queue it for cancel [d3519b9d9606991a1305596348b6d690bfa3eb27] Matt Fleming (1): sched/loadavg: Avoid loadavg spikes caused by delayed NO_HZ accounting [6e5f32f7a43f45ee55c401c0b9585eb01f9629a8] Mauro Carvalho Chehab (1): [media] dvb-usb: don't use stack for firmware load [43fab9793c1f44e665b4f98035a14942edf03ddc] Max Lohrmann (1): target: Fix VERIFY_16 handling in sbc_parse_cdb [13603685c1f12c67a7a2427f00b63f39a2b6f7c9] Michael Ellerman (1): powerpc/boot: Fix zImage TOC alignment [97ee351b50a49717543533cfb85b4bf9d88c9680] Michael Engl (1): iio: adc: ti_am335x_adc: fix fifo overrun recovery [e83bb3e6f3efa21f4a9d883a25d0ecd9dfb431e1] Michael S. Tsirkin (1): virtio_console: fix uninitialized variable use [2055997f983c6db7b5c3940ce5f8f822657d5bc3] Michal Nazarewicz (2): include/linux/kernel.h: change abs() macro so it uses consistent return type [8f57e4d930d48217268315898212518d4d3e0773] kernel.h: make abs() work with 64-bit types [c8299cb605b27dd5a49f7a69e48fd23e5a206298] Minchan Kim (1): zram: do not use copy_page with non-page aligned address [d72e9a7a93e4f8e9e52491921d99e0c8aa89eb4e] Murray McAllister (1): drm/vmwgfx: avoid calling vzalloc with a 0 size in vmw_get_cap_3d_ioctl() [63774069d9527a1aeaa4aa20e929ef5e8e9ecc38] Nathan Sullivan (1): net: phy: handle state correctly in phy_stop_machine [49d52e8108a21749dc2114b924c907db43358984] Nicholas Bellinger (3): iscsi-target: Drop work-around for legacy GlobalSAN initiator [1c99de981f30b3e7868b8d20ce5479fa1c0fea46] iscsi-target: Fix TMR reference leak during session shutdown [efb2ea770bb3b0f40007530bc8b0c22f36e1c5eb] target/pscsi: Fix TYPE_TAPE + TYPE_MEDIMUM_CHANGER export [a04e54f2c35823ca32d56afcd5cea5b783e2f51a] Nicholas Piggin (1): powerpc/kernel: Use kprobe blacklist for asm functions [6f698df10cb24d466b9a790b9daedb9e7bcd5d2a] Nikolaus Schulz (1): iio: core: Fix IIO_VAL_FRACTIONAL_LOG2 for negative values [7fd6592d1287046f61bfd3cda3c03cd35be490f7] Oliver Neukum (1): ACM gadget: fix endianness in notifications [cdd7928df0d2efaa3270d711963773a08a4cc8ab] Oliver O'Halloran (1): powerpc/64: Fix flush_(d|i)cache_range() called from modules [8f5f525d5b83f7d76a6baf9c4e94d4bf312ea7f6] Pan Bian (1): team: fix memory leaks [72ec0bc64b9a5d8e0efcb717abfc757746b101b7] Paolo Abeni (1): ipv6: move stub initialization after ipv6 setup completion [b7d6df57516f8e6a1c847b822ec2a62555455f88] Paul Burton (1): MIPS: End spinlocks with .insn [4b5347a24a0f2d3272032c120664b484478455de] Paul Mackerras (1): powerpc: Don't try to fix up misaligned load-with-reservation instructions [48fe9e9488743eec9b7c1addd3c93f12f2123d54] Pavel Shilovsky (1): CIFS: Handle mismatched open calls [38bd49064a1ecb67baad33598e3d824448ab11ec] Peter Xu (1): KVM: x86: clear bus pointer when destroyed [df630b8c1e851b5e265dc2ca9c87222e342c093b] Peter Zijlstra (4): futex: Add missing error handling to FUTEX_REQUEUE_PI [9bbb25afeb182502ca4f2c4f3f88af0681b34cae] futex: Fix potential use-after-free in FUTEX_REQUEUE_PI [c236c8e95a3d395b0494e7108f0d41cf36ec107c] perf/core: Fix event inheritance on fork() [e7cc4865f0f31698ef2f7aac01a50e78968985b7] perf/x86: Avoid exposing wrong/stale data in intel_pmu_lbr_read_32() [f2200ac311302fcdca6556fd0c5127eab6c65a3e] Raghava Aditya Renukunta (1): scsi: aacraid: Fix typo in blink status [934767c56b0d9dbb95a40e9e6e4d9dcdc3a165ad] Rik van Riel (1): tracing: Add #undef to fix compile error [bf7165cfa23695c51998231c4efa080fe1d3548d] Robert Middleton (1): gpio:mcp23s08 Fixed missing interrupts [2cd29f2387be70de9feb4c9f8dbc7c0bd55748ce] Roger Quadros (1): usb: gadget: f_uvc: Fix SuperSpeed companion descriptor's wBytesPerInterval [09424c50b7dff40cb30011c09114404a4656e023] Sabrina Dubroca (1): ipv6: make ECMP route replacement less greedy [67e194007be08d071294456274dd53e0a04fdf90] Sachin Prabhu (1): cifs: Do not send echoes before Negotiate is complete [62a6cfddcc0a5313e7da3e8311ba16226fe0ac10] Samuel Thibault (1): usb-core: Add LINEAR_FRAME_INTR_BINTERVAL USB quirk [3243367b209faed5c320a4e5f9a565ee2a2ba958] Sebastian Siewior (1): ubi/upd: Always flush after prepared for an update [9cd9a21ce070be8a918ffd3381468315a7a76ba6] Shaohua Li (1): md/raid1/10: fix potential deadlock [61eb2b43b99ebdc9bc6bc83d9792257b243e7cb3] Sinclair Yeh (1): drm/vmwgfx: Make sure backup_handle is always valid [07678eca2cf9c9a18584e546c2b2a0d0c9a3150c] Song Hongyan (1): iio: hid-sensor-attributes: Fix sensor property setting failure. [bba6d9e47f3ea894e501f94b086a59ffe28241ac] Stefan Brüns (1): [media] dvb-usb-firmware: don't do DMA on stack [67b0503db9c29b04eadfeede6bebbfe5ddad94ef] Stefan Wahren (1): serial: mxs-auart: fix baud rate range [df57cf6a879502cd6e5559c1f2d6db12128e074f] Steven Rostedt (2): ring-buffer: Have ring_buffer_iter_empty() return true when empty [78f7a45dac2a2d2002f98a3a95f7979867868d73] tracing: Allocate the snapshot buffer before enabling probe [df62db5be2e5f070ecd1a5ece5945b590ee112e0] Suzuki K Poulose (1): kvm: arm/arm64: Fix locking for kvm_free_stage2_pgd [8b3405e345b5a098101b0c31b264c812bba045d9] Sven Eckelmann (1): batman-adv: Keep fragments equally sized [1c2bcc766be44467809f1798cd4ceacafe20a852] Takashi Iwai (6): ALSA: ctxfi: Fix the incorrect check of dma_set_mask() call [f363a06642f28caaa78cb6446bbad90c73fe183c] ALSA: seq: Don't break snd_use_lock_sync() loop by timeout [4e7655fd4f47c23e5249ea260dc802f909a64611] ALSA: seq: Fix race during FIFO resize [2d7d54002e396c180db0c800c1046f0a3c471597] ALSA: seq: Fix racy cell insertions during snd_seq_pool_done() [c520ff3d03f0b5db7146d9beed6373ad5d2a5e0e] ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT [ba3021b2c79b2fa9114f92790a99deb27a65b728] ALSA: timer: Fix race between read and ioctl [d11662f4f798b50d8c8743f433842c3e40fe3378] Theodore Ts'o (1): ext4: lock the xattr block before checksuming it [dac7a4b4b1f664934e8b713f529b629f67db313c] Thomas Gleixner (1): x86/vdso: Plug race between mapping and ELF header setup [6fdc6dd90272ce7e75d744f71535cfbd8d77da81] Thomas Hellstrom (3): drm/ttm, drm/vmwgfx: Relax permission checking when opening surfaces [fe25deb7737ce6c0879ccf79c99fa1221d428bf2] drm/vmwgfx: Remove getparam error message [53e16798b0864464c5444a204e1bb93ae246c429] drm/vmwgfx: Type-check lookups of fence objects [f7652afa8eadb416b23eb57dec6f158529942041] Thorsten Leemhuis (1): Input: elantech - add Fujitsu Lifebook E547 to force crc_enabled [704de489e0e3640a2ee2d0daf173e9f7375582ba] Uwe Kleine-König (1): serial: mxs-auart: Fix baudrate calculation [a6040bc610554c66088fda3608ae5d6307c548e4] Wei Yongjun (1): ring-buffer: Fix return value check in test_ringbuffer() [62277de758b155dc04b78f195a1cb5208c37b2df] Willy Tarreau (1): char: lp: fix possible integer overflow in lp_setup() [3e21f4af170bebf47c187c1ff8bf155583c9f3b1] Yuejie Shi (1): af_key: Add lock to key dump [89e357d83c06b6fac581c3ca7f0ee3ae7e67109e] Zheng Yan (1): ceph: fix recursion between ceph_set_acl() and __ceph_setattr() [8179a101eb5f4ef0ac9a915fcea9a9d3109efa90] Makefile | 4 +- arch/arm/boot/dts/bcm5301x.dtsi | 4 +- arch/arm/kvm/mmu.c | 10 + arch/metag/include/asm/uaccess.h | 15 +- arch/metag/lib/usercopy.c | 312 ++++++++------------- arch/mips/include/asm/spinlock.h | 8 +- arch/mips/kernel/kgdb.c | 48 +++- arch/powerpc/boot/zImage.lds.S | 1 + arch/powerpc/include/asm/ppc_asm.h | 40 +-- arch/powerpc/kernel/align.c | 27 +- arch/powerpc/kernel/misc_32.S | 4 +- arch/powerpc/kernel/misc_64.S | 7 +- arch/powerpc/kernel/setup_64.c | 9 + arch/s390/boot/compressed/misc.c | 35 +-- arch/s390/include/asm/pgtable.h | 2 + arch/s390/include/asm/uaccess.h | 2 +- arch/s390/mm/pgtable.c | 19 +- arch/x86/include/asm/elf.h | 2 +- arch/x86/kernel/cpu/perf_event_intel_lbr.c | 2 + arch/x86/kernel/ftrace.c | 12 + arch/x86/kernel/kprobes/common.h | 2 +- arch/x86/kernel/kprobes/core.c | 6 +- arch/x86/kernel/kprobes/opt.c | 2 +- arch/x86/mm/init.c | 41 ++- arch/x86/pci/xen.c | 23 +- .../platform/intel-mid/device_libs/platform_wdt.c | 2 +- arch/x86/vdso/vdso32-setup.c | 11 +- drivers/acpi/Makefile | 1 - drivers/acpi/acpi_platform.c | 8 +- drivers/acpi/apei/ghes.c | 1 + drivers/acpi/power.c | 1 + drivers/block/xen-blkback/blkback.c | 23 +- drivers/block/xen-blkback/common.h | 25 +- drivers/block/zram/zram_drv.c | 6 +- drivers/char/lp.c | 6 +- drivers/char/mem.c | 82 ++++-- drivers/char/virtio_console.c | 6 +- drivers/crypto/caam/ctrl.c | 3 +- drivers/gpio/gpio-mcp23s08.c | 60 +++- drivers/gpu/drm/ttm/ttm_object.c | 10 +- drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 79 ++++-- drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_resource.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 26 +- drivers/hwmon/asus_atk0110.c | 3 + drivers/iio/adc/ti_am335x_adc.c | 13 +- .../iio/common/hid-sensors/hid-sensor-attributes.c | 10 + drivers/iio/industrialio-core.c | 16 +- drivers/infiniband/hw/mlx5/main.c | 2 +- drivers/infiniband/hw/qib/qib_iba7322.c | 2 +- drivers/input/joystick/iforce/iforce-usb.c | 3 + drivers/input/misc/cm109.c | 4 + drivers/input/misc/ims-pcu.c | 4 + drivers/input/misc/yealink.c | 4 + drivers/input/mouse/elantech.c | 8 + drivers/input/serio/i8042-x86ia64io.h | 14 + drivers/input/tablet/hanwang.c | 3 + drivers/input/tablet/kbtab.c | 3 + drivers/input/touchscreen/sur40.c | 3 + drivers/isdn/gigaset/bas-gigaset.c | 3 + drivers/md/raid10.c | 18 ++ drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 33 ++- drivers/mmc/host/sdhci-of-arasan.c | 16 +- drivers/mmc/host/sdhci.c | 10 +- drivers/mmc/host/ushc.c | 3 + drivers/mtd/ubi/upd.c | 8 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 167 ++++++++--- drivers/net/ethernet/broadcom/genet/bcmgenet.h | 14 +- drivers/net/ethernet/brocade/bna/bnad_debugfs.c | 2 +- drivers/net/ethernet/toshiba/tc35815.c | 2 +- drivers/net/macvlan.c | 11 +- drivers/net/phy/phy.c | 2 +- drivers/net/phy/phy_device.c | 2 +- drivers/net/team/team.c | 8 +- drivers/net/usb/cx82310_eth.c | 7 +- drivers/net/usb/smsc75xx.c | 8 +- drivers/net/usb/sr9700.c | 9 +- drivers/net/wimax/i2400m/usb.c | 3 + drivers/net/wireless/iwlwifi/dvm/calib.c | 2 +- drivers/scsi/aacraid/src.c | 2 +- drivers/scsi/libiscsi.c | 26 +- drivers/scsi/libsas/sas_ata.c | 2 +- drivers/scsi/lpfc/lpfc_init.c | 1 + drivers/scsi/sd.c | 20 +- drivers/scsi/sr.c | 6 +- drivers/target/iscsi/iscsi_target_parameters.c | 16 -- drivers/target/iscsi/iscsi_target_util.c | 12 +- drivers/target/target_core_pscsi.c | 47 +--- drivers/target/target_core_sbc.c | 10 +- drivers/tty/serial/mxs-auart.c | 10 +- drivers/usb/class/usbtmc.c | 9 +- drivers/usb/core/config.c | 10 + drivers/usb/core/hcd.c | 7 +- drivers/usb/core/hub.c | 2 +- drivers/usb/core/quirks.c | 8 + drivers/usb/dwc3/gadget.h | 14 +- drivers/usb/gadget/f_acm.c | 4 +- drivers/usb/gadget/f_fs.c | 15 +- drivers/usb/gadget/f_uvc.c | 12 +- drivers/usb/host/xhci.c | 43 +-- drivers/usb/misc/idmouse.c | 3 + drivers/usb/misc/iowarrior.c | 8 + drivers/usb/misc/uss720.c | 5 + drivers/usb/serial/digi_acceleport.c | 2 +- drivers/usb/serial/io_ti.c | 6 + drivers/usb/serial/option.c | 17 +- drivers/usb/serial/qcserial.c | 2 + drivers/usb/serial/safe_serial.c | 5 + drivers/usb/wusbcore/wa-hc.c | 3 + drivers/uwb/hwa-rc.c | 3 + drivers/uwb/i1480/dfu/usb.c | 3 + drivers/video/fbdev/xen-fbfront.c | 4 +- drivers/virtio/virtio_balloon.c | 4 + drivers/xen/xen-acpi-processor.c | 34 ++- fs/ceph/inode.c | 14 +- fs/cifs/cifsglob.h | 12 +- fs/cifs/cifssmb.c | 4 + fs/cifs/connect.c | 13 +- fs/cifs/smb1ops.c | 10 + fs/cifs/smb2misc.c | 44 +++ fs/cifs/smb2ops.c | 3 + fs/cifs/smb2pdu.c | 9 +- fs/cifs/smb2proto.h | 7 + fs/cifs/smb2transport.c | 58 +++- fs/cifs/transport.c | 2 + fs/exec.c | 28 +- fs/ext4/inline.c | 5 +- fs/ext4/xattr.c | 65 ++--- fs/nfs/nfs4proc.c | 2 - include/drm/ttm/ttm_object.h | 5 +- include/linux/kernel.h | 45 +-- include/linux/kvm_host.h | 4 +- include/linux/phy.h | 4 + include/linux/skbuff.h | 7 + include/linux/usb/quirks.h | 6 + include/scsi/libiscsi.h | 1 + include/trace/events/syscalls.h | 1 + kernel/events/core.c | 5 +- kernel/futex.c | 22 +- kernel/ptrace.c | 14 +- kernel/sched/proc.c | 4 +- kernel/trace/ring_buffer.c | 24 +- kernel/trace/trace.c | 8 +- net/9p/client.c | 4 + net/batman-adv/fragmentation.c | 20 +- net/ceph/messenger.c | 6 + net/ceph/osdmap.c | 1 - net/core/sock.c | 10 +- net/dccp/ipv4.c | 3 +- net/dccp/ipv6.c | 8 +- net/ipv4/ip_output.c | 2 +- net/ipv4/netfilter/nf_nat_snmp_basic.c | 19 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv6/af_inet6.c | 6 +- net/ipv6/ip6_fib.c | 2 + net/ipv6/ip6_output.c | 2 +- net/ipv6/ndisc.c | 3 +- net/ipv6/route.c | 2 + net/ipv6/tcp_ipv6.c | 8 +- net/key/af_key.c | 46 ++- net/l2tp/l2tp_core.c | 160 ++++++++--- net/l2tp/l2tp_core.h | 9 +- net/l2tp/l2tp_debugfs.c | 10 +- net/l2tp/l2tp_eth.c | 10 +- net/l2tp/l2tp_ip.c | 17 +- net/l2tp/l2tp_ip6.c | 18 +- net/l2tp/l2tp_netlink.c | 46 ++- net/l2tp/l2tp_ppp.c | 101 ++++--- net/mac80211/rx.c | 24 ++ net/sched/act_csum.c | 8 +- net/sched/act_nat.c | 18 +- net/sched/sch_dsmark.c | 10 +- net/unix/garbage.c | 18 +- net/wireless/nl80211.c | 52 ++-- net/xfrm/xfrm_policy.c | 10 +- security/keys/gc.c | 2 +- sound/core/seq/seq_clientmgr.c | 1 + sound/core/seq/seq_fifo.c | 7 + sound/core/seq/seq_lock.c | 9 +- sound/core/seq/seq_memory.c | 17 +- sound/core/seq/seq_memory.h | 1 + sound/core/timer.c | 7 +- sound/pci/ctxfi/cthw20k1.c | 2 +- tools/perf/util/symbol.c | 2 +- tools/power/cpupower/utils/helpers/cpuid.c | 1 + virt/kvm/eventfd.c | 3 +- virt/kvm/kvm_main.c | 40 ++- 187 files changed, 1916 insertions(+), 1048 deletions(-) -- Ben Hutchings If the facts do not conform to your theory, they must be disposed of.