This is the start of the review cycle for the Linux 3.16.7-ckt25 stable kernel. This version contains 129 new patches, summarized below. The new patches are posted as replies to this message and also available in this git branch: http://kernel.ubuntu.com/git/ubuntu/linux.git/log/?h=linux-3.16.y-review git://kernel.ubuntu.com/ubuntu/linux.git linux-3.16.y-review The review period for version 3.16.7-ckt25 will be open for the next three days. To report a problem, please reply to the relevant follow-up patch message. For more information about the Linux 3.16.y-ckt extended stable kernel series, see https://wiki.ubuntu.com/Kernel/Dev/ExtendedStable . -Luis -- Documentation/sysctl/fs.txt | 23 +++ arch/arm/common/icst.c | 9 +- arch/arm64/Makefile | 1 + arch/mips/include/asm/syscall.h | 4 +- arch/powerpc/kernel/eeh_pe.c | 33 ++-- arch/powerpc/kvm/book3s_hv_rmhandlers.S | 2 +- arch/powerpc/perf/power8-pmu.c | 2 +- arch/x86/kernel/apic/io_apic.c | 6 +- arch/x86/mm/pageattr.c | 4 +- crypto/ablkcipher.c | 1 + crypto/algif_hash.c | 169 ++++++++++++++++++- crypto/algif_skcipher.c | 155 ++++++++++++++++- crypto/crypto_user.c | 6 +- crypto/shash.c | 7 +- drivers/ata/ahci.c | 20 +++ drivers/ata/libahci.c | 4 +- drivers/ata/libata-sff.c | 32 ++-- drivers/gpu/drm/i915/intel_display.c | 20 ++- drivers/gpu/drm/radeon/radeon_sa.c | 5 + drivers/gpu/drm/vmwgfx/vmwgfx_drv.c | 7 + drivers/gpu/drm/vmwgfx/vmwgfx_fb.c | 4 +- drivers/iio/adc/Kconfig | 1 + drivers/iio/dac/mcp4725.c | 1 + drivers/iio/imu/adis_buffer.c | 2 +- drivers/iio/inkern.c | 2 + drivers/iio/pressure/mpl115.c | 2 +- drivers/infiniband/hw/cxgb3/iwch_cm.c | 4 +- drivers/infiniband/hw/mlx5/qp.c | 12 +- drivers/media/dvb-frontends/tda1004x.c | 9 + drivers/media/pci/saa7134/saa7134-alsa.c | 5 +- drivers/media/usb/usbvision/usbvision-video.c | 47 +++++- drivers/net/phy/phy.c | 31 ++-- drivers/net/ppp/pptp.c | 34 ++-- drivers/pci/hotplug/acpiphp_glue.c | 4 +- drivers/pci/pcie/aer/aerdrv.c | 4 +- drivers/pci/pcie/aer/aerdrv.h | 1 - drivers/pci/pcie/aer/aerdrv_core.c | 2 - drivers/phy/phy-twl4030-usb.c | 1 + drivers/platform/x86/intel_scu_ipcutil.c | 2 +- drivers/s390/net/qeth_l2_main.c | 1 + drivers/s390/net/qeth_l3_main.c | 1 + drivers/scsi/device_handler/scsi_dh_rdac.c | 4 +- drivers/scsi/scsi_devinfo.c | 1 + drivers/scsi/sd.c | 7 +- drivers/scsi/sg.c | 2 +- drivers/scsi/sr.c | 4 + drivers/staging/speakup/selection.c | 5 +- drivers/target/target_core_device.c | 43 +++++ drivers/target/target_core_file.c | 29 +--- drivers/target/target_core_iblock.c | 56 ++----- drivers/tty/n_tty.c | 7 +- drivers/tty/pty.c | 21 ++- drivers/tty/serial/omap-serial.c | 8 +- drivers/tty/tty_io.c | 24 ++- drivers/usb/class/cdc-acm.c | 14 +- drivers/usb/class/cdc-acm.h | 1 + drivers/usb/core/hub.c | 8 +- drivers/usb/host/xhci-pci.c | 4 +- drivers/usb/host/xhci-ring.c | 10 -- drivers/usb/host/xhci.c | 4 +- drivers/usb/serial/cp210x.c | 1 + drivers/usb/serial/ftdi_sio.c | 1 + drivers/usb/serial/ftdi_sio_ids.h | 1 + drivers/usb/serial/option.c | 18 +- drivers/usb/serial/visor.c | 11 +- drivers/virtio/virtio_pci.c | 2 + fs/btrfs/backref.c | 10 +- fs/btrfs/delayed-inode.c | 3 +- fs/btrfs/delayed-inode.h | 2 +- fs/btrfs/inode.c | 14 +- fs/devpts/inode.c | 20 +++ fs/namespace.c | 1 + fs/ocfs2/dlm/dlmrecovery.c | 2 + fs/pipe.c | 47 +++++- include/asm-generic/cputime_nsecs.h | 5 +- include/drm/drm_fixed.h | 53 +++++- include/linux/cgroup.h | 6 + include/linux/crypto.h | 8 + include/linux/devpts_fs.h | 4 + include/linux/pipe_fs_i.h | 4 + include/linux/radix-tree.h | 22 ++- include/linux/rmap.h | 14 -- include/linux/sched.h | 1 + include/net/af_unix.h | 4 +- include/net/scm.h | 1 + include/sound/rawmidi.h | 4 + include/target/target_core_backend.h | 3 + kernel/cgroup.c | 22 ++- kernel/module.c | 26 +-- kernel/sysctl.c | 14 ++ kernel/workqueue.c | 18 +- lib/asn1_decoder.c | 5 +- lib/dump_stack.c | 7 +- lib/klist.c | 6 +- lib/radix-tree.c | 12 +- mm/backing-dev.c | 2 +- mm/mmap.c | 56 +++---- mm/vmstat.c | 3 +- net/core/scm.c | 7 + net/ipv6/ip6_flowlabel.c | 5 +- net/mac80211/ibss.c | 1 - net/mac80211/mesh.c | 11 -- net/mac80211/mesh.h | 4 - net/mac80211/mlme.c | 2 - net/mac80211/scan.c | 12 +- net/netlink/af_netlink.c | 3 +- net/rfkill/core.c | 16 +- net/sctp/socket.c | 10 +- net/unix/af_unix.c | 5 +- net/unix/garbage.c | 8 +- security/integrity/evm/evm_main.c | 3 +- sound/core/compress_offload.c | 11 ++ sound/core/oss/pcm_oss.c | 21 ++- sound/core/rawmidi.c | 134 ++++++++++----- sound/core/seq/oss/seq_oss_init.c | 2 +- sound/core/seq/oss/seq_oss_synth.c | 2 +- sound/core/seq/seq_clientmgr.c | 3 + sound/core/seq/seq_ports.c | 233 ++++++++++++++------------ sound/core/seq/seq_timer.c | 87 +++++++--- sound/core/seq/seq_virmidi.c | 23 ++- sound/core/timer.c | 98 ++++++----- sound/drivers/dummy.c | 35 ++-- sound/firewire/bebob/bebob_stream.c | 14 +- sound/pci/hda/patch_cirrus.c | 27 +++ sound/pci/hda/patch_hdmi.c | 3 +- sound/pci/hda/patch_realtek.c | 9 +- sound/soc/codecs/rt5645.c | 2 +- sound/soc/soc-pcm.c | 3 +- sound/usb/midi.c | 1 - sound/usb/quirks.c | 14 +- tools/perf/ui/browsers/annotate.c | 4 +- tools/perf/util/hist.c | 2 + 132 files changed, 1567 insertions(+), 613 deletions(-) Akinobu Mita (1): iio: pressure: mpl115: fix temperature offset sign Alan Stern (1): SCSI: fix crashes in sd and sr runtime PM Alexandra Yates (1): ahci: Intel DNV device IDs SATA Alexey Khoroshilov (1): [media] usbvision: fix leak of usb_dev on failure paths in usbvision_probe() Andrey Konovalov (1): ALSA: usb-audio: avoid freeing umidi object twice Bard Liao (1): ASoC: rt5645: fix the shift bit of IN1 boost Dan Carpenter (2): iio: inkern: fix a NULL dereference on error intel_scu_ipcutil: underflow in scu_reg_access() Daniele Palmas (1): USB: serial: option: Adding support for Telit LE922 David Henningsson (1): ALSA: hda - Fix static checker warning in patch_hdmi.c David Howells (1): ASN.1: Fix non-match detection failure on data overrun David Sterba (1): btrfs: properly set the termination value of ctx->pos in readdir Du, Changbin (1): usb: hub: do not clear BOS field during reset device Eric Dumazet (3): dump_stack: avoid potential deadlocks af_unix: fix struct pid memory leak ipv6: fix a lockdep splat Eric W. Biederman (1): umount: Do not allow unmounting rootfs. Filipe Manana (1): Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl Florian Fainelli (1): net: phy: Fix phy_mac_interrupt() Gavin Shan (1): powerpc/eeh: Fix PE location code Greg Kroah-Hartman (1): USB: serial: ftdi_sio: add support for Yaesu SCU-18 cable Guillaume Fougnies (1): ALSA: usb-audio: Fix TEAC UD-501/UD-503/NT-503 usb delay Hannes Frederic Sowa (2): pptp: fix illegal memory access caused by multiple bind()s unix: correctly track in-flight fds in sending process user_struct Hannes Reinecke (1): scsi_dh_rdac: always retry MODE SELECT on command lock violation Hariprasad S (1): iw_cxgb3: Fix incorrectly returning error on success Harry Wentland (1): drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil Herbert Xu (10): crypto: algif_skcipher - Require setkey before accept(2) crypto: algif_skcipher - Add nokey compatibility path crypto: algif_hash - Require setkey before accept(2) crypto: skcipher - Add crypto_skcipher_has_setkey crypto: algif_skcipher - Add key check exception for cipher_null crypto: algif_hash - Remove custom release parent function crypto: algif_skcipher - Remove custom release parent function crypto: algif_hash - Fix race condition in hash_check_key crypto: algif_skcipher - Fix race condition in skcipher_check_key crypto: shash - Fix has_key setting Herton R. Krzesinski (2): pty: fix possible use after free of tty->driver_data pty: make sure super_block is still valid in final /dev/tty close Insu Yun (1): ACPI / PCI / hotplug: unlock in error path in acpiphp_enable_slot() James Bottomley (1): klist: fix starting point removed bug in klist iterators James Hogan (1): MIPS: Fix buffer overflow in syscall_get_arguments() Jani Nikula (1): drm/i915/dp: fall back to 18 bpp when sink capability is unknown Jiri Olsa (1): perf hists: Fix HISTC_MEM_DCACHELINE width setting Johan Hovold (1): USB: visor: fix null-deref at probe Johannes Berg (1): rfkill: fix rfkill_fop_read wait_event usage John Ernberg (1): USB: option: fix Cinterion AHxx enumeration Ken-ichirou MATSUZAWA (1): netlink: not trim skb for mmaped socket when dump Kirill A. Shutemov (1): drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration Konstantin Khlebnikov (2): mm: replace vma_lock_anon_vma with anon_vma_lock_read/write radix-tree: fix oops after radix_tree_iter_retry Lars-Peter Clausen (1): iio: adis_buffer: Fix out-of-bounds memory access Leon Romanovsky (1): IB/mlx5: Fix RC transport send queue overhead computation Linus Torvalds (1): vmstat: explicitly schedule per-cpu work on the CPU we need it to run on Linus Walleij (2): ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz() ARM: 8519/1: ICST: try other dividends than 1 Lu Baolu (3): usb: cdc-acm: handle unlinked urb in acm read callback usb: cdc-acm: send zero packet for intel 7260 modem usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms Lucas Tanure (1): ALSA: bebob: Use a signed return type for get_formation_index Madhavan Srinivasan (1): powerpc/perf: Remove PPMU_HAS_SSLOT flag for Power8 Marcelo Ricardo Leitner (1): sctp: allow setting SCTP_SACK_IMMEDIATELY by the application Markus Trippelsdorf (1): perf annotate browser: Fix behaviour of Shift-Tab with nothing focussed Mathias Krause (1): crypto: user - lock crypto_alg_list on alg dump Mathias Nyman (2): Revert "xhci: don't finish a TD if we get a short-transfer event mid TD" xhci: Fix list corruption in urb dequeue at host removal Matt Fleming (1): x86/mm/pat: Avoid truncation when converting cpa->numpages to address Matthew Wilcox (1): radix-tree: fix race in gang lookup Mauro Carvalho Chehab (2): [media] tda1004x: only update the frontend properties if locked [media] saa7134-alsa: Only frees registered sound cards Michael S. Tsirkin (1): virtio_pci: fix use after free on release Mika Westerberg (1): SCSI: Add Marvell Console to VPD blacklist Mike Christie (1): target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors Nicolai Hähnle (1): drm/radeon: hold reference to fences in radeon_sa_bo_new Oliver Neukum (2): [media] usbvision fix overflow of interfaces array cdc-acm:exclude Samsung phone 04e8:685d Peter Dedecker (1): USB: cp210x: add ID for IAI USB to RS485 adaptor Peter Hurley (4): tty: Fix unsafe ldisc reference via ioctl(TIOCGETD) n_tty: Fix unsafe reference to "other" ldisc staging/speakup: Use tty_ldisc_ref() for paste kworker serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485) Rob Clark (1): drm/vmwgfx: respect 'nomodeset' Rusty Russell (1): module: wrapper for symbol name. Ryan Ware (1): EVM: Use crypto_memneq() for digest comparisons Sachin Kulkarni (1): mac80211: Requeue work after scan complete for all VIF types. Sebastian Andrzej Siewior (1): PCI/AER: Flush workqueue on device remove to avoid use-after-free Takashi Iwai (21): ALSA: seq: Fix incorrect sanity check at snd_seq_oss_synth_cleanup() ALSA: seq: Degrade the error message for too many opens ALSA: compress: Disable GET_CODEC_CAPS ioctl for some architectures ALSA: dummy: Disable switching timer backend via sysfs ALSA: seq: Fix race at closing in virmidi driver ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check ALSA: pcm: Fix potential deadlock in OSS emulation ALSA: seq: Fix yet another races among ALSA timer accesses ALSA: timer: Code cleanup ALSA: timer: Fix link corruption due to double start or stop ALSA: hda - Add fixup for Mac Mini 7,1 model ALSA: rawmidi: Make snd_rawmidi_transmit() race-free ALSA: rawmidi: Fix race at copying & updating the position ALSA: seq: Fix lockdep warnings due to double mutex locks ALSA: timer: Fix leftover link at closing Revert "ALSA: hda - Fix noise on Gigabyte Z170X mobo" ALSA: hda - Fix speaker output from VAIO AiO machines ALSA: dummy: Implement timer backend switching more safely ALSA: timer: Fix wrong instance passed to slave callbacks ALSA: timer: Fix race between stop and interrupt ALSA: timer: Fix race at concurrent reads Tejun Heo (5): Revert "workqueue: make sure delayed work run in local cpu" cgroup: make sure a parent css isn't offlined before its children libata: disable forced PORTS_IMPL for >= AHCI 1.3 libata: fix sff host state machine locking while polling workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup Tetsuo Handa (1): mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress Thomas Gleixner (1): x86/irq: Call chip->irq_set_affinity in proper context Thomas Hellstrom (1): drm/vmwgfx: Fix an fb unlocking bug Thomas Huth (1): KVM: PPC: Fix emulation of H_SET_DABR/X on POWER8 Tony Lindgren (1): phy: twl4030-usb: Relase usb phy on unload Ursula Braun (1): qeth: initialize net_device with carrier off Vegard Nossum (1): iio: add HAS_IOMEM dependency to VF610_ADC Vinod Koul (1): ASoC: dpcm: fix the BE state on hw_free Vladis Dronov (2): [media] usbvision: fix crash on detecting device with invalid configuration USB: serial: visor: fix crash on detecting device without write_urbs Wang, Rui Y (1): crypto: algif_hash - wait for crypto_ahash_init() to complete Willy Tarreau (1): pipe: limit the per-user amount of pages allocated in pipes Xin Long (1): sctp: translate network order to host order when users get a hmacid Yong Li (1): iio: dac: mcp4725: set iio name property in sysfs dann frazier (1): arm64: errata: Add -mpc-relative-literal-loads to build flags xuejiufei (1): ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery cleanup zengtao (1): cputime: Prevent 32bit overflow in time[val|spec]_to_cputime() -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html