Hello RT-list! I'm pleased to announce the 4.4.296-rt229 stable release. This is just an update to the latest stable release. No RT specific changes. Known issue: - locktorture reports a might_sleep warning for spin_locks test You can get this release via the git tree at: git://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git branch: v4.4-rt Head SHA1: e74cae7dec172a5ab396b493760686f629389a45 Signing key fingerprint: 5BF6 7BC5 0826 72CA BB45 ACAE 587C 5ECA 5D0A 306C Enjoy! Daniel Changes from v4.4.292-rt228: --- Ahmad Fatoum (1): watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT Alan Young (1): ALSA: ctl: Fix copy of updated id with element read/write Aleksander Jan Bajkowski (2): MIPS: lantiq: dma: add small delay after reset MIPS: lantiq: dma: reset correct number of channel Alexander Aring (1): net: ieee802154: handle iftypes as u32 Alexander Mikhalitsyn (1): shm: extend forced shm destroy to support objects from several IPC nses Anant Thazhemadam (1): media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() Anatolij Gustschin (1): powerpc/5200: dts: fix memory node unit name André Almeida (1): ACPI: battery: Accept charges over the design capacity as full Andy Shevchenko (1): serial: 8250_dw: Drop wrong use of ACPI_PTR() Anel Orazgaliyeva (1): cpuidle: Fix kobject memory leaks in error paths Armin Wolf (1): hwmon: (dell-smm) Fix warning on /proc/i8k creation error Arnd Bergmann (5): hyperv/vmbus: include linux/bitops.h ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 memstick: avoid out-of-range warning ARM: 9156/1: drop cc-option fallbacks for architecture selection siphash: use _unaligned version by default Austin Kim (1): ALSA: synth: missing check for possible NULL after the call to kstrdup Baokun Li (2): sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl Barnabás PÅ?cze (1): platform/x86: wmi: do not fail if disabling fails Bart Van Assche (1): MIPS: sni: Fix the build Chengfeng Ye (2): nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails ALSA: gus: fix null pointer dereference on pointer block Christian Löhle (1): mmc: dw_mmc: Dont wait for DRTO on Write RSP error Christophe JAILLET (1): platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' Christophe Leroy (1): video: fbdev: chipsfb: use memset_io() instead of memset() Claudiu Beznea (1): dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro Damien Le Moal (1): libata: fix read log timeout value Dan Carpenter (10): b43legacy: fix a lower bounds test b43: fix a lower bounds test memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() drm/msm: uninitialized variable in msm_gem_import() usb: gadget: hid: fix error code in do_config() scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() can: sja1000: fix use after free in ems_pcmcia_add_card() net: altera: set a couple error code in probe() net/qla3xxx: fix an error code in ql_adapter_up() Daniel Jordan (1): crypto: pcrypt - Delay write to padata->info Daniel Wagner (2): Merge tag 'v4.4.296' into v4.4-rt Linux 4.4.296-rt229 Daniele Palmas (2): USB: serial: option: add Telit LE910S1 0x9200 composition USB: serial: option: add Telit FN990 compositions David Hildenbrand (1): proc/vmcore: fix clearing user buffer by properly using clear_user() Davidlohr Bueso (1): block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) Dirk Bender (1): media: mt9p031: Fix corrupted frame after restarting stream Dongli Zhang (2): xen/netfront: stop tx queues during live migration vmxnet3: do not stop tx queues after netif_device_detach() Dongliang Mu (2): JFS: fix memleak in jfs_mount memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe Eiichi Tsukata (1): vsock: prevent unnecessary refcnt inc for nonblocking connect Eric Badger (1): EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell Eric Biggers (3): wait: add wake_up_pollfree() binder: use wake_up_pollfree() signalfd: use wake_up_pollfree() Eric Dumazet (3): llc: fix out-of-bound array index in llc_sk_dev_hash() tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows net, neigh: clear whole pneigh_entry at alloc time Eric W. Biederman (1): signal: Remove the bogus sigkill_pending in ptrace_stop Felix Fietkau (1): mac80211: send ADDBA requests using the tid/queue of the aggregation session Filipe Manana (1): btrfs: fix lost error handling when replaying directory deletes Florian Fainelli (2): ARM: dts: BCM5301X: Add interrupt properties to GPIO node net: systemport: Add global locking for descriptor lifecycle Florian Westphal (1): netfilter: nfnetlink_queue: fix OOB when mac header was cleared Giovanni Cabiddu (1): crypto: qat - detect PFVF collision after ACK Greg Kroah-Hartman (13): Linux 4.4.293 Linux 4.4.294 HID: add hid_is_usb() function to make it simpler for USB detection HID: add USB_HID dependancy to hid-prodikeys HID: add USB_HID dependancy to hid-chicony HID: add USB_HID dependancy on some USB HID drivers HID: wacom: fix problems when device is not a valid USB device HID: check for valid USB device for many HID drivers USB: gadget: detect too-big endpoint 0 requests USB: gadget: zero allocate endpoint 0 buffers Linux 4.4.295 USB: gadget: bRequestType is a bitfield, not a enum Linux 4.4.296 Guanghui Feng (1): tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc Guo Zhi (1): scsi: advansys: Fix kernel pointer leak Hannes Reinecke (1): libata: add horkage for ASMedia 1092 Harshit Mogalapalli (1): net: netlink: af_netlink: Prevent empty skb by adding a check on len. Helge Deller (3): parisc: Fix ptrace check on syscall return parisc: Fix "make install" on newer debian releases parisc/agp: Annotate parisc agp init functions with __init Henrik Grimler (1): power: supply: max17042_battery: use VFSOC for capacity when no rsns Huang Guobin (1): bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed Ingmar Klein (1): PCI: Mark Atheros QCA6174 to avoid bus reset J. Bruce Fields (1): nfsd: fix use-after-free due to delegation race Jackie Liu (1): ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() Jakob Hauser (1): power: supply: rt5033_battery: Change voltage values to µV Jakub Kicinski (1): net: stream: don't purge sk_error_queue in sk_stream_kill_queues() James Smart (1): scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() Jan Kara (1): ocfs2: fix data corruption on truncate Jason Gerecke (1): HID: introduce hid_is_using_ll_driver Jens Axboe (1): fs: add fget_many() and fput_many() Jerome Marchand (1): recordmcount.pl: look for jgnop instruction as well as bcrl on s390 Joakim Zhang (1): net: fec: only clear interrupt of handling queue in fec_enet_rx_queue() Joe Thornber (1): dm btree remove: fix use after free in rebalance_children() Johan Hovold (9): ALSA: ua101: fix division by zero at probe ALSA: 6fire: fix control and bulk message timeouts ALSA: line6: fix control and interrupt message timeouts mwifiex: fix division by zero in fw download path ath6kl: fix division by zero in send path ath6kl: fix control-message timeout USB: iowarrior: fix control-message timeouts USB: chipidea: fix interrupt deadlock drm/udl: fix control-message timeout Johannes Berg (1): iwlwifi: mvm: disable RX-diversity in powersave Jonas DreÃ?ler (2): mwifiex: Read a PCI register after writing the TX ring write pointer mwifiex: Send DELBA requests according to spec Juergen Gross (13): xen: sync include/xen/interface/io/ring.h with Xen's newest version xen/blkfront: read response from backend only once xen/blkfront: don't take local copy of a request from the ring page xen/blkfront: don't trust the backend response data blindly xen/netfront: read response from backend only once xen/netfront: don't read data from request on the ring page xen/netfront: disentangle tx_skb_freelist xen/netfront: don't trust the backend response data blindly tty: hvc: replace BUG_ON() with negative return value xen/blkfront: harden blkfront against event channel storms xen/netfront: harden netfront against event channel storms xen/console: harden hvc_xen against event channel storms xen/netback: don't queue unlimited number of packages Kees Cook (1): media: si470x: Avoid card name truncation Krzysztof Kozlowski (1): nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done Lars-Peter Clausen (4): iio: stk3310: Don't return error code in interrupt handler iio: mma8452: Fix trigger reference couting iio: ltr501: Don't return error code in trigger handler iio: itg3200: Call iio_trigger_notify_done() on error Lasse Collin (2): lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression lib/xz: Validate the value before assigning it to an enum variable Lee Jones (2): staging: ion: Prevent incorrect reference counting behavour net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero Leon Romanovsky (1): RDMA/mlx4: Return missed an error if device doesn't support steering Letu Ren (1): igbvf: fix double free in `igbvf_probe` Lin Ma (3): NFC: reorganize the functions in nci_request NFC: reorder the logic in nfc_{un,}register_device NFC: add NCI_UNREG flag to eliminate the race Linus Lüssing (5): ath9k: Fix potential interrupt storm on queue reset batman-adv: Fix multicast TT issues with bogus ROAM flags batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh Linus Torvalds (1): fget: check that the fd still exists after getting a ref to it Loic Poulain (1): wcn36xx: Fix HT40 capability for 2Ghz band Lu Wei (1): maple: fix wrong return value of maple_bus_init(). Maciej W. Rozycki (1): vgacon: Propagate console boot parameters before calling `vc_resize' Manjong Lee (1): mm: bdi: initialize bdi_min_ratio when bdi is unregistered Masami Hiramatsu (2): ARM: clang: Do not rely on lr register for stacktrace kprobes: Limit max data_size of the kretprobe instances Mathias Nyman (3): xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay usb: hub: Fix usb enumeration issue due to address0 race usb: hub: Fix locking issues with address0_mutex Maxim Kiselev (1): net: davinci_emac: Fix interrupt pacing disable Michael Ellerman (1): powerpc/dcr: Use cmplwi instead of 3-argument cmpli Mike Christie (3): scsi: target: Fix ordered tag handling scsi: target: Fix alua_tg_pt_gps_count tracking scsi: iscsi: Unblock session then wake up error handler Mike Kravetz (1): hugetlb: take PMD sharing into account when flushing tlb/caches Miklos Szeredi (2): fuse: fix page stealing fuse: release pipe buf after last use Mingjie Zhang (1): USB: serial: option: add Fibocom FM101-GL variants Nadav Amit (1): hugetlbfs: flush TLBs correctly after huge_pmd_unshare Nathan Chancellor (5): platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning hexagon: export raw I/O routines for modules soc/tegra: fuse: Fix bitwise vs. logical OR warning net: lan78xx: Avoid unnecessary self assignment Input: touchscreen - avoid bitwise vs logical OR warning Nguyen Dinh Phi (1): cfg80211: call cfg80211_stop_ap when switch from P2P_GO type Nick Desaulniers (1): sh: check return code of request_irq Nicolas Dichtel (1): tun: fix bonding active backup with arp monitoring Nicolas Pitre (1): ARM: 8805/2: remove unneeded naked function usage Nikolay Borisov (1): btrfs: fix memory ordering between normal and ordered work functions Ondrej Jirman (1): i2c: rk3x: Handle a spurious start completion interrupt flag Pali Rohár (1): PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros Pavel Hofman (1): usb: core: config: fix validation of wMaxPacketValue entries Pavel Skripkin (4): ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume media: dvb-usb: fix ununit-value in az6027_rc_query net: batman-adv: fix error handling net: bnx2x: fix variable dereferenced before check Pawan Gupta (1): smackfs: Fix use-after-free in netlbl_catmap_walk() Pekka Korpinen (1): iio: dac: ad5446: Fix ad5622_write() return value Peter Zijlstra (1): x86: Increase exception stack sizes Phoenix Huang (1): Input: elantench - fix misreporting trackpoint coordinates Pierre Gondois (1): serial: pl011: Add ACPI SBSA UART match id Quinn Tran (1): scsi: qla2xxx: Turn off target reset during issue_lip Rafael J. Wysocki (1): ACPICA: Avoid evaluating methods too early during system resume Rajat Asthana (1): media: mceusb: return without resubmitting URB in case of -EPROTO error. Randy Dunlap (8): mmc: winbond: don't build on M68K ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK m68k: set a default value for MEMORY_RESERVE sh: fix kconfig unmet dependency warning for FRAME_POINTER sh: define __BIG_ENDIAN for math-emu mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set mips: bcm63xx: add support for clk_get_parent() natsemi: xtensa: fix section mismatch warnings Ricardo Ribalda (1): media: uvcvideo: Set capability in s_param Roger Quadros (1): ARM: dts: omap: fix gpmc,mux-add-data type Rustam Kovhaev (1): mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag Sean Christopherson (1): x86/irq: Ensure PI wakeup handler is unregistered before module unload Sean Young (1): media: ite-cir: IR receiver stop working after receive overflow Sebastian Krzyszkowiak (1): power: supply: max17042_battery: Prevent int underflow in set_soc_threshold Slark Xiao (1): platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep Sreekanth Reddy (1): scsi: mpt3sas: Fix kernel panic during drive powercycle test Stefano Stabellini (2): xen: don't continue xenstore initialization in case of errors xen: detect uninitialized xenbus in xenbus_init Steven Rostedt (VMware) (4): tracefs: Have tracefs directories not set OTH permission bits by default tracing: Check pid filtering when creating events tracefs: Have new files inherit the ownership of their parent tracefs: Set all files to the same group ownership as the mount option Sven Eckelmann (7): batman-adv: Keep fragments equally sized batman-adv: Prevent duplicated softif_vlan entry batman-adv: Consider fragmentation for needed_headroom batman-adv: Reserve needed_*room for fragments batman-adv: Don't always reallocate the fragmentation skb head batman-adv: Avoid WARN_ON timing related checks tty: serial: msm_serial: Deactivate RX DMA for polling support Sven Schnelle (4): parisc: fix warning in flush_tlb_all parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling parisc/entry: fix trace test in syscall exit path parisc/sticon: fix reverse colors Tadeusz Struk (1): nfc: fix segfault in nfc_genl_dump_devices_done Taehee Yoo (1): batman-adv: set .owner to THIS_MODULE Takashi Iwai (11): Input: i8042 - Add quirk for Fujitsu Lifebook T725 ALSA: timer: Unconditionally unlink slave instances, too ALSA: mixer: oss: Fix racy access to slots Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() ASoC: DAPM: Cover regression by kctl change notification fix ALSA: ctxfi: Fix out-of-range access ASoC: topology: Add missing rwsem around snd_ctl_remove() calls ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE ALSA: pcm: oss: Fix negative period/buffer sizes ALSA: pcm: oss: Limit the period size to 16MB ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() Teng Qi (1): net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock() Tetsuo Handa (2): smackfs: use __GFP_NOFAIL for smk_cipso_doi() smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi Thomas Gleixner (2): PCI/MSI: Destroy sysfs before freeing entries PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error Thomas Perrot (1): spi: spl022: fix Microwire full duplex mode Todd Kjos (3): binder: use euid from cred instead of using task binder: use cred instead of task for selinux checks binder: fix test regression due to sender_euid change Tong Zhang (1): scsi: dc395: Fix error case unwinding Trond Myklebust (1): NFSv42: Don't fail clone() unless the OP_CLONE operation failed Tuo Li (2): media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() Uwe Kleine-König (1): usb: max-3421: Use driver data instead of maintaining a list of bound devices Vasily Averin (1): mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks Vasily Gorbik (1): s390/setup: avoid using memblock_enforce_memory_limit Vincent Donnefort (1): sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() Vincent Mailhol (1): can: pch_can: pch_can_rx_normal: fix use after free Vladimir Murzin (1): irqchip: nvic: Fix offset for Interrupt Priority Offsets Wang Hai (3): USB: serial: keyspan: fix memleak on probe errors libertas_tf: Fix possible memory leak in probe and disconnect libertas: Fix possible memory leak in probe and disconnect Wang ShaoBo (1): Bluetooth: fix use-after-free error in lock_sock_nested() Wang Wensheng (1): ALSA: timer: Fix use-after-free problem Wudi Wang (1): irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL Yang Yingliang (3): usb: musb: tusb6010: check return value after calling platform_get_resource() usb: host: ohci-tmio: check return value after calling platform_get_resource() iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove Ye Bin (1): PM: hibernate: Get block device exclusively in swsusp_check() Yu Liao (1): timekeeping: Really make sure wall_to_monotonic isn't positive YueHaibing (1): xen-pciback: Fix return in pm_ctrl_init() Zev Weiss (1): hwmon: (pmbus/lm25066) Add offset coefficients Zhang Yi (2): quota: check block number when reading the block in quota file quota: correct error number in free_dqentry() Zheyu Ma (3): media: netup_unidvb: handle interrupt properly according to the firmware memstick: r592: Fix a UAF bug when removing the driver mwl8k: Fix use-after-free in mwl8k_fw_state_machine() Zhou Qingyang (1): net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() hongao (1): drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors liuguoqiang (1): net: return correct error code zhangyue (1): net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound