This is the start of the stable review cycle for the 4.3.3 release. There are 71 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon Dec 14 20:05:02 UTC 2015. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.3.3-rc1.gz and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.3.3-rc1 Hans Verkuil <hverkuil@xxxxxxxxx> cobalt: fix Kconfig dependency Lu, Han <han.lu@xxxxxxxxx> ALSA: hda/hdmi - apply Skylake fix-ups to Broxton display codec Dan Williams <dan.j.williams@xxxxxxxxx> ALSA: pci: depend on ZONE_DMA Arnd Bergmann <arnd@xxxxxxxx> ceph: fix message length computation Ming Lei <ming.lei@xxxxxxxxxxxxx> block: fix segment split Junxiao Bi <junxiao.bi@xxxxxxxxxx> ocfs2: fix umask ignored issue Jeff Layton <jlayton@xxxxxxxxxxxxxxx> nfs: if we have no valid attrs, then don't declare the attribute cache valid Jeff Layton <jlayton@xxxxxxxxxxxxxxx> nfs4: resend LAYOUTGET when there is a race that changes the seqid Benjamin Coddington <bcodding@xxxxxxxxxx> nfs4: start callback_ident at idr 1 Daniel Borkmann <daniel@xxxxxxxxxxxxx> debugfs: fix refcount imbalance in start_creating Andrew Elble <aweits@xxxxxxx> nfsd: eliminate sending duplicate and repeated delegations Jeff Layton <jlayton@xxxxxxxxxxxxxxx> nfsd: serialize state seqid morphing operations Stefan Richter <stefanr@xxxxxxxxxxxxxxxxx> firewire: ohci: fix JMicron JMB38x IT context discovery Daeho Jeong <daeho.jeong@xxxxxxxxxxx> ext4, jbd2: ensure entering into panic after recording an error in superblock Lukas Czerner <lczerner@xxxxxxxxxx> ext4: fix potential use after free in __ext4_journal_stop Theodore Ts'o <tytso@xxxxxxx> ext4 crypto: fix bugs in ext4_encrypted_zeroout() Theodore Ts'o <tytso@xxxxxxx> ext4 crypto: fix memory leak in ext4_bio_write_page() Ilya Dryomov <idryomov@xxxxxxxxx> rbd: don't put snap_context twice in rbd_queue_workfn() David Sterba <dsterba@xxxxxxxx> btrfs: fix signed overflows in btrfs_sync_file Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix race when listing an inode's xattrs Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix race leading to incorrect item deletion when dropping extents Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix regression when running delayed references Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix truncation of compressed and inlined extents Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix file corruption and data loss after cloning inline extents David Sterba <dsterba@xxxxxxxx> btrfs: check unsupported filters in balance arguments Robin Ruede <r.ruede@xxxxxxxxx> btrfs: fix resending received snapshot with parent Eric Dumazet <edumazet@xxxxxxxxxx> net_sched: fix qdisc_tree_decrease_qlen() races Paolo Abeni <pabeni@xxxxxxxxxx> openvswitch: fix hangup on vxlan/gre/geneve device deletion Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: sctp: implement sctp_v6_destroy_sock() Konstantin Khlebnikov <koct9i@xxxxxxxxx> net/neighbour: fix crash at dumping device-agnostic proxy entries Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: add complete rcu protection around np->opt Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf, array: fix heap out-of-bounds access when updating elements Quentin Casasnovas <quentin.casasnovas@xxxxxxxxxx> RDS: fix race condition when sending a message on unbound socket Michal Kubeček <mkubecek@xxxxxxx> ipv6: distinguish frag queues by device for multicast and link-local packets Ying Xue <ying.xue@xxxxxxxxxxxxx> tipc: fix error handling of expanding buffer headroom Aaro Koskinen <aaro.koskinen@xxxxxx> broadcom: fix PHY_ID_BCM5481 entry in the id table Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx> vrf: fix double free and memory corruption on register_netdevice failure Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx> net: ip6mr: fix static mfc/dev leaks on table destruction Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx> net: ipmr: fix static mfc/dev leaks on table destruction Daniel Borkmann <daniel@xxxxxxxxxxxxx> net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds Eric Dumazet <edumazet@xxxxxxxxxx> tcp: initialize tp->copied_seq in case of cross SYN connection Eric Dumazet <edumazet@xxxxxxxxxx> tcp: fix potential huge kmalloc() calls in TCP_REPAIR Yuchung Cheng <ycheng@xxxxxxxxxx> tcp: disable Fast Open on timeouts after handshake Eric Dumazet <edumazet@xxxxxxxxxx> tcp: md5: fix lockdep annotation Bjørn Mork <bjorn@xxxxxxx> net: qmi_wwan: add XS Stick W100-2 from 4G Systems Paolo Abeni <pabeni@xxxxxxxxxx> net/ip6_tunnel: fix dst leak Neil Horman <nhorman@xxxxxxxxxxxxx> snmp: Remove duplicate OUTMCAST stat increment Pavel Fedin <p.fedin@xxxxxxxxxxx> net: thunder: Check for driver data in nicvf_remove() Dragos Tatulea <dragos@xxxxxxxxxxxx> net: switchdev: fix return code of fdb_dump stub Jason A. Donenfeld <Jason@xxxxxxxxx> ip_tunnel: disable preemption when updating per-cpu tstats Eran Ben Elisha <eranbe@xxxxxxxxxxxx> net/mlx4_core: Fix sleeping while holding spinlock at rem_slave_counters Tariq Toukan <tariqt@xxxxxxxxxxxx> net/mlx5e: Added self loopback prevention lucien <lucien.xin@xxxxxxxxx> sctp: translate host order to network order when setting a hmacid Daniel Borkmann <daniel@xxxxxxxxxxxxx> packet: fix tpacket_snd max frame len Daniel Borkmann <daniel@xxxxxxxxxxxxx> packet: infer protocol from ethernet header if unset Daniel Borkmann <daniel@xxxxxxxxxxxxx> packet: only allow extra vlan len on ethernet devices Daniel Borkmann <daniel@xxxxxxxxxxxxx> packet: always probe for transport header Daniel Borkmann <daniel@xxxxxxxxxxxxx> packet: do skb_probe_transport_header when we actually have data Kamal Mostafa <kamal@xxxxxxxxxxxxx> tools/net: Use include/uapi with __EXPORTED_HEADERS__ Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> Revert "ipv6: ndisc: inherit metadata dst when creating ndisc requests" Martin KaFai Lau <kafai@xxxxxx> ipv6: Check rt->dst.from for the DST_NOCACHE route Martin KaFai Lau <kafai@xxxxxx> ipv6: Check expire on DST_NOCACHE route Martin KaFai Lau <kafai@xxxxxx> ipv6: Avoid creating RTF_CACHE from a rt that is not managed by fib6 tree Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx> af-unix: passcred support for sendpage Rainer Weikusat <rweikusat@xxxxxxxxxxxxxxxxxxxxxxx> unix: avoid use-after-free in ep_remove_wait_queue Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx> af_unix: take receive queue lock while appending new skb Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx> af_unix: don't append consumed skbs to sk_receive_queue Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx> af-unix: fix use-after-free with concurrent readers while splicing françois romieu <romieu@xxxxxxxxxxxxx> r8169: fix kasan reported skb use-after-free. Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx> certs: add .gitignore to stop git nagging about x509_certificate_list ------------- Diffstat: Makefile | 4 +- block/blk-merge.c | 4 +- certs/.gitignore | 4 + drivers/block/rbd.c | 1 + drivers/firewire/ohci.c | 5 + drivers/media/pci/cobalt/Kconfig | 2 +- drivers/net/ethernet/cavium/thunder/nicvf_main.c | 10 +- .../net/ethernet/mellanox/mlx4/resource_tracker.c | 39 ++- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 56 +++- drivers/net/ethernet/realtek/r8169.c | 6 +- drivers/net/phy/broadcom.c | 2 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/vrf.c | 15 +- fs/btrfs/delayed-ref.c | 113 ++++++++ fs/btrfs/extent-tree.c | 14 + fs/btrfs/file.c | 26 +- fs/btrfs/inode.c | 92 +++++-- fs/btrfs/ioctl.c | 200 ++++++++++---- fs/btrfs/send.c | 10 +- fs/btrfs/volumes.h | 8 + fs/btrfs/xattr.c | 4 +- fs/ceph/mds_client.c | 2 +- fs/debugfs/inode.c | 6 +- fs/ext4/crypto.c | 23 +- fs/ext4/ext4_jbd2.c | 6 +- fs/ext4/extents.c | 3 + fs/ext4/page-io.c | 5 +- fs/ext4/super.c | 12 +- fs/jbd2/journal.c | 6 +- fs/nfs/inode.c | 6 +- fs/nfs/nfs4client.c | 2 +- fs/nfs/pnfs.c | 56 ++-- fs/nfsd/nfs4state.c | 127 +++++++-- fs/nfsd/state.h | 19 +- fs/ocfs2/namei.c | 2 + include/linux/ipv6.h | 2 +- include/linux/jbd2.h | 1 + include/linux/mlx5/mlx5_ifc.h | 24 +- include/net/af_unix.h | 1 + include/net/ip6_fib.h | 3 +- include/net/ip6_tunnel.h | 3 +- include/net/ip_tunnels.h | 3 +- include/net/ipv6.h | 22 +- include/net/ndisc.h | 3 +- include/net/sch_generic.h | 3 + include/net/switchdev.h | 2 +- kernel/.gitignore | 1 - kernel/bpf/arraymap.c | 2 +- net/core/neighbour.c | 4 +- net/core/scm.c | 2 + net/dccp/ipv6.c | 33 ++- net/ipv4/ipmr.c | 15 +- net/ipv4/tcp_input.c | 23 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv4/tcp_timer.c | 12 + net/ipv6/addrconf.c | 2 +- net/ipv6/af_inet6.c | 13 +- net/ipv6/datagram.c | 4 +- net/ipv6/exthdrs.c | 3 +- net/ipv6/inet6_connection_sock.c | 11 +- net/ipv6/ip6_tunnel.c | 2 +- net/ipv6/ip6mr.c | 15 +- net/ipv6/ipv6_sockglue.c | 33 ++- net/ipv6/mcast.c | 2 - net/ipv6/ndisc.c | 10 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 5 +- net/ipv6/raw.c | 8 +- net/ipv6/reassembly.c | 10 +- net/ipv6/route.c | 24 +- net/ipv6/syncookies.c | 2 +- net/ipv6/tcp_ipv6.c | 28 +- net/ipv6/udp.c | 8 +- net/l2tp/l2tp_ip6.c | 8 +- net/openvswitch/dp_notify.c | 2 +- net/openvswitch/vport-netdev.c | 8 +- net/packet/af_packet.c | 86 ++++--- net/rds/connection.c | 6 - net/rds/send.c | 4 +- net/sched/sch_api.c | 27 +- net/sched/sch_generic.c | 2 +- net/sched/sch_mq.c | 4 +- net/sched/sch_mqprio.c | 4 +- net/sctp/auth.c | 4 +- net/sctp/socket.c | 9 +- net/tipc/udp_media.c | 7 +- net/unix/af_unix.c | 286 ++++++++++++++++++--- sound/pci/Kconfig | 24 +- sound/pci/hda/patch_hdmi.c | 3 +- tools/net/Makefile | 7 +- 89 files changed, 1321 insertions(+), 403 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html