This is the start of the review cycle for the Linux 3.13.11-ckt36 stable kernel. This version contains 138 new patches, summarized below. The new patches are posted as replies to this message and also available in this git branch: http://kernel.ubuntu.com/git/ubuntu/linux.git/log/?h=linux-3.13.y-review git://kernel.ubuntu.com/ubuntu/linux.git linux-3.13.y-review The review period for version 3.13.11-ckt36 will be open for the next three days. To report a problem, please reply to the relevant follow-up patch message. For more information about the Linux 3.13.y-ckt extended stable kernel series, see https://wiki.ubuntu.com/Kernel/Dev/ExtendedStable . -Kamal -- Documentation/networking/ip-sysctl.txt | 8 + Documentation/sysctl/fs.txt | 23 ++ arch/arm/common/icst.c | 9 +- arch/powerpc/kernel/module_64.c | 2 +- arch/x86/ia32/ia32entry.S | 1 + arch/x86/kvm/paging_tmpl.h | 2 +- crypto/algif_hash.c | 4 +- crypto/crypto_user.c | 6 +- crypto/shash.c | 7 +- drivers/ata/ahci.c | 20 ++ drivers/ata/libahci.c | 4 +- drivers/ata/libata-sff.c | 32 +-- drivers/dma/dw/core.c | 15 +- drivers/gpu/drm/i915/intel_display.c | 20 +- drivers/gpu/drm/i915/intel_i2c.c | 2 +- drivers/gpu/drm/qxl/qxl_ioctl.c | 3 +- drivers/gpu/drm/radeon/radeon_sa.c | 5 + drivers/gpu/drm/radeon/radeon_ttm.c | 2 +- drivers/hwmon/ads1015.c | 2 +- drivers/iio/dac/mcp4725.c | 1 + drivers/iio/inkern.c | 2 + drivers/infiniband/hw/cxgb3/iwch_cm.c | 4 +- drivers/infiniband/ulp/isert/ib_isert.c | 19 ++ drivers/infiniband/ulp/srpt/ib_srpt.c | 9 + drivers/iommu/dmar.c | 2 +- drivers/iommu/intel_irq_remapping.c | 2 +- drivers/md/bcache/super.c | 8 +- drivers/media/dvb-frontends/tda1004x.c | 9 + drivers/media/pci/saa7134/saa7134-alsa.c | 5 +- drivers/net/bonding/bond_main.c | 39 +++- drivers/net/can/usb/ems_usb.c | 14 +- drivers/net/ethernet/mellanox/mlx4/en_clock.c | 25 ++- drivers/net/ethernet/mellanox/mlx4/en_port.c | 4 +- drivers/net/phy/dp83640.c | 17 ++ drivers/net/ppp/pppoe.c | 2 + drivers/net/ppp/pptp.c | 34 ++- drivers/net/usb/qmi_wwan.c | 1 + drivers/pci/pcie/aer/aerdrv.c | 4 +- drivers/pci/pcie/aer/aerdrv.h | 1 - drivers/pci/pcie/aer/aerdrv_core.c | 2 - drivers/pci/xen-pcifront.c | 10 +- drivers/phy/phy-twl4030-usb.c | 1 + drivers/platform/x86/intel_scu_ipcutil.c | 2 +- drivers/s390/block/dasd_alias.c | 23 +- drivers/scsi/device_handler/scsi_dh_rdac.c | 4 +- drivers/scsi/qla2xxx/tcm_qla2xxx.c | 16 ++ drivers/scsi/scsi_devinfo.c | 1 + drivers/scsi/sg.c | 2 +- drivers/staging/android/binder.c | 2 +- drivers/target/iscsi/iscsi_target.c | 13 ++ drivers/target/iscsi/iscsi_target_configfs.c | 8 + drivers/target/iscsi/iscsi_target_util.c | 4 +- drivers/target/iscsi/iscsi_target_util.h | 1 + drivers/target/loopback/tcm_loop.c | 6 + drivers/target/sbp/sbp_target.c | 6 + drivers/target/target_core_configfs.c | 4 + drivers/target/target_core_device.c | 43 ++++ drivers/target/target_core_file.c | 29 +-- drivers/target/target_core_iblock.c | 56 ++--- drivers/target/target_core_tmr.c | 150 +++++++++---- drivers/target/target_core_transport.c | 289 ++++++++++++++++++-------- drivers/target/tcm_fc/tcm_fc.h | 1 + drivers/target/tcm_fc/tfc_cmd.c | 5 + drivers/target/tcm_fc/tfc_conf.c | 1 + drivers/tty/pty.c | 21 +- drivers/tty/serial/omap-serial.c | 8 +- drivers/usb/gadget/tcm_usb_gadget.c | 6 + drivers/usb/host/xhci-pci.c | 4 +- drivers/usb/host/xhci-ring.c | 10 - drivers/usb/host/xhci.c | 4 +- drivers/usb/serial/cp210x.c | 2 + drivers/usb/serial/option.c | 9 + drivers/vhost/scsi.c | 6 + drivers/xen/xen-pciback/pciback_ops.c | 9 +- fs/bio.c | 12 +- fs/btrfs/backref.c | 10 +- fs/btrfs/delayed-inode.c | 3 +- fs/btrfs/delayed-inode.h | 2 +- fs/btrfs/inode.c | 14 +- fs/cifs/cifsencrypt.c | 2 +- fs/devpts/inode.c | 20 ++ fs/ext4/inode.c | 72 +++++-- fs/ext4/move_extent.c | 15 +- fs/ext4/resize.c | 2 +- fs/hpfs/namei.c | 31 +-- fs/namei.c | 4 + fs/namespace.c | 1 + fs/nfs/nfs4proc.c | 4 +- fs/ocfs2/dlm/dlmrecovery.c | 2 + fs/pipe.c | 47 ++++- include/asm-generic/cputime_nsecs.h | 5 +- include/drm/drm_fixed.h | 53 ++++- include/linux/compiler.h | 2 +- include/linux/devpts_fs.h | 4 + include/linux/ipv6.h | 1 + include/linux/nfs_fs.h | 4 +- include/linux/pipe_fs_i.h | 4 + include/linux/radix-tree.h | 22 +- include/linux/rmap.h | 14 -- include/linux/sched.h | 1 + include/linux/skbuff.h | 1 + include/linux/tracepoint.h | 6 + include/net/af_unix.h | 4 +- include/net/scm.h | 1 + include/sound/rawmidi.h | 4 + include/target/iscsi/iscsi_transport.h | 1 + include/target/target_core_backend.h | 3 + include/target/target_core_base.h | 4 +- include/target/target_core_fabric.h | 1 + include/uapi/linux/ipv6.h | 1 + kernel/module.c | 26 ++- kernel/resource.c | 5 +- kernel/sysctl.c | 14 ++ kernel/trace/trace_events.c | 3 +- kernel/workqueue.c | 18 +- lib/dump_stack.c | 7 +- lib/klist.c | 6 +- lib/radix-tree.c | 12 +- mm/backing-dev.c | 2 +- mm/mmap.c | 56 +++-- mm/vmstat.c | 3 +- net/ceph/messenger.c | 4 +- net/core/scm.c | 7 + net/core/skbuff.c | 2 + net/core/sysctl_net_core.c | 10 + net/ipv4/devinet.c | 2 +- net/ipv4/ip_sockglue.c | 2 + net/ipv4/ping.c | 4 +- net/ipv4/raw.c | 4 +- net/ipv4/tcp.c | 4 +- net/ipv4/tcp_ipv4.c | 13 +- net/ipv4/udp.c | 4 +- net/ipv6/addrconf.c | 12 +- net/ipv6/datagram.c | 3 + net/ipv6/ip6_flowlabel.c | 5 +- net/ipv6/ndisc.c | 16 +- net/iucv/af_iucv.c | 3 + net/mac80211/ibss.c | 1 - net/mac80211/mesh.c | 11 - net/mac80211/mesh.h | 4 - net/mac80211/mlme.c | 2 - net/mac80211/scan.c | 16 +- net/rfkill/core.c | 16 +- net/sctp/protocol.c | 47 ++++- net/sctp/socket.c | 10 +- net/sunrpc/cache.c | 2 +- net/unix/af_unix.c | 28 ++- net/unix/diag.c | 2 +- net/unix/garbage.c | 8 +- security/integrity/evm/evm_main.c | 3 +- sound/core/hwdep.c | 3 +- sound/core/oss/pcm_oss.c | 21 +- sound/core/rawmidi.c | 169 ++++++++++----- sound/core/seq/seq_clientmgr.c | 3 + sound/core/seq/seq_fifo.c | 4 +- sound/core/seq/seq_memory.c | 19 +- sound/core/seq/seq_ports.c | 240 +++++++++++---------- sound/core/seq/seq_prioq.c | 4 +- sound/core/seq/seq_queue.c | 4 +- sound/core/seq/seq_timer.c | 91 ++++++-- sound/core/seq/seq_virmidi.c | 23 +- sound/core/timer.c | 72 +++++-- sound/drivers/dummy.c | 37 ++-- sound/pci/hda/patch_cirrus.c | 27 +++ sound/pci/hda/patch_hdmi.c | 3 +- sound/pci/hda/patch_realtek.c | 1 + sound/soc/soc-pcm.c | 3 +- sound/usb/midi.c | 1 - virt/kvm/async_pf.c | 2 +- 169 files changed, 1815 insertions(+), 813 deletions(-) Al Viro (1): do_last(): don't let a bogus return value from ->open() et.al. to confuse us Alex Leung (1): target: Fix Task Aborted Status (TAS) handling Alexandra Yates (1): ahci: Intel DNV device IDs SATA Amir Vadai (1): net/mlx4_en: Count HW buffer overrun only once Andreas Schwab (1): powerpc: Fix dedotify for binutils >= 2.26 Andrey Konovalov (1): ALSA: usb-audio: avoid freeing umidi object twice Andrey Skvortsov (1): USB: option: add support for SIM7100E Andy Lutomirski (1): x86/entry/compat: Add missing CLAC to entry_INT80_32 Andy Shevchenko (1): dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer Anton Protopopov (2): cifs: fix erroneous return value rtnl: RTM_GETNETCONF: fix wrong return value Arnd Bergmann (1): tracing: Fix freak link error caused by branch tracer Benjamin Coddington (1): NFSv4: Fix a dentry leak on alias use Bjørn Mork (2): USB: option: add "4G LTE usb-modem U901" qmi_wwan: add "4G LTE usb-modem U901" CQ Tang (1): iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG Christian Borntraeger (1): KVM: async_pf: do not warn on page allocation failures Christoph Hellwig (1): nfs: fix nfs_size_to_loff_t Dan Carpenter (2): iio: inkern: fix a NULL dereference on error intel_scu_ipcutil: underflow in scu_reg_access() David Henningsson (1): ALSA: hda - Fix static checker warning in patch_hdmi.c David Sterba (1): btrfs: properly set the termination value of ctx->pos in readdir Dmitry V. Levin (1): unix_diag: fix incorrect sign extension in unix_lookup_by_ino Eliad Peller (1): mac80211: start_next_roc only if scan was actually running Eric Dumazet (5): dump_stack: avoid potential deadlocks tcp: fix NULL deref in tcp_v4_send_ack() af_unix: fix struct pid memory leak ipv6: fix a lockdep splat ipv4: fix memory leaks in ip_cmsg_send() callers Eric W. Biederman (1): umount: Do not allow unmounting rootfs. Eryu Guan (1): ext4: don't read blocks from disk after extents being swapped Eugenia Emantayev (1): net/mlx4_en: Choose time-stamping shift value according to HW frequency Filipe Manana (1): Btrfs: fix hang on extent buffer lock caused by the inode_paths ioctl Gerd Hoffmann (1): drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command Gerhard Uttenthaler (1): can: ems_usb: Fix possible tx overflow Guillaume Nault (1): pppoe: fix reference counting in PPPoE proxy Hangbin Liu (1): net/ipv6: add sysctl option accept_ra_min_hop_limit Hannes Frederic Sowa (2): pptp: fix illegal memory access caused by multiple bind()s unix: correctly track in-flight fds in sending process user_struct Hannes Reinecke (2): scsi_dh_rdac: always retry MODE SELECT on command lock violation bio: return EINTR if copying to user space got interrupted Hans Westgaard Ry (1): net:Add sysctl_max_skb_frags Hariprasad S (1): iw_cxgb3: Fix incorrectly returning error on success Harry Wentland (1): drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil Herbert Xu (1): crypto: shash - Fix has_key setting Herton R. Krzesinski (2): pty: fix possible use after free of tty->driver_data pty: make sure super_block is still valid in final /dev/tty close Ilya Dryomov (1): libceph: don't bail early from try_read() when skipping a message Insu Yun (1): ext4: fix potential integer overflow James Bottomley (1): klist: fix starting point removed bug in klist iterators Jan Kara (2): ext4: fix bh->b_state corruption ext4: fix crashes in dioread_nolock mode Jani Nikula (1): drm/i915/dp: fall back to 18 bpp when sink capability is unknown Jay Vosburgh (1): bonding: Fix ARP monitor validation Johannes Berg (1): rfkill: fix rfkill_fop_read wait_event usage Ken Lin (1): USB: cp210x: add IDs for GE B650V3 and B850V3 boards Kent Overstreet (1): bcache: Fix a lockdep splat in an error path Kirill A. Shutemov (1): drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration Konrad Rzeszutek Wilk (3): xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY xen/pciback: Save the number of MSI-X entries to be copied later. xen/pcifront: Fix mysterious crashes when NUMA locality information was extracted. Konstantin Khlebnikov (2): mm: replace vma_lock_anon_vma with anon_vma_lock_read/write radix-tree: fix oops after radix_tree_iter_retry Linus Torvalds (1): vmstat: explicitly schedule per-cpu work on the CPU we need it to run on Linus Walleij (2): ARM: 8517/1: ICST: avoid arithmetic overflow in icst_hz() ARM: 8519/1: ICST: try other dividends than 1 Lisa Du (1): drivers: android: correct the size of struct binder_uintptr_t for BC_DEAD_BINDER_DONE Lu Baolu (1): usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms Manfred Rudigier (1): net: dp83640: Fix tx timestamp overflow handling. Marcelo Ricardo Leitner (1): sctp: allow setting SCTP_SACK_IMMEDIATELY by the application Mathias Krause (1): crypto: user - lock crypto_alg_list on alg dump Mathias Nyman (2): Revert "xhci: don't finish a TD if we get a short-transfer event mid TD" xhci: Fix list corruption in urb dequeue at host removal Matthew Wilcox (1): radix-tree: fix race in gang lookup Mauro Carvalho Chehab (2): [media] tda1004x: only update the frontend properties if locked [media] saa7134-alsa: Only frees registered sound cards Mika Westerberg (1): SCSI: Add Marvell Console to VPD blacklist Mike Christie (1): target: Fix WRITE_SAME/DISCARD conversion to linux 512b sectors Mike Krinkin (1): KVM: x86: MMU: fix ubsan index-out-of-range warning Mikulas Patocka (1): hpfs: don't truncate the file when delete fails Neil Horman (1): sctp: Fix port hash table size computation Nicholas Bellinger (6): target: Add TFO->abort_task for aborted task resources release target: Fix LUN_RESET active TMR descriptor handling target: Fix LUN_RESET active I/O handling for ACK_KREF target: Fix TAS handling for multi-session se_node_acls target: Fix remote-port TMR ABORT + se_cmd fabric stop target: Fix race with SCF_SEND_DELAYED_TAS handling Nicolai Hähnle (1): drm/radeon: hold reference to fences in radeon_sa_bo_new Paolo Abeni (1): ipv6/udp: use sticky pktinfo egress ifindex on connect() Peter Hurley (1): serial: omap: Prevent DoS using unprivileged ioctl(TIOCSRS485) Peter Rosin (1): hwmon: (ads1015) Handle negative conversion values correctly Rainer Weikusat (2): af_unix: Guard against other == sk in unix_dgram_sendmsg af_unix: Don't set err in unix_stream_read_generic unless there was an error Rasmus Villemoes (2): drm/i915: fix error path in intel_setup_gmbus() drm/radeon: use post-decrement in error handling Rusty Russell (1): module: wrapper for symbol name. Ryan Ware (1): EVM: Use crypto_memneq() for digest comparisons Sachin Kulkarni (1): mac80211: Requeue work after scan complete for all VIF types. Sebastian Andrzej Siewior (1): PCI/AER: Flush workqueue on device remove to avoid use-after-free Simon Guinot (1): kernel/resource.c: fix muxed resource handling in __request_region() Stefan Haberland (2): s390/dasd: prevent incorrect length error under z/VM after PAV changes s390/dasd: fix refcount for PAV reassignment Stefan Hajnoczi (1): sunrpc/cache: fix off-by-one in qword_get() Steven Rostedt (Red Hat) (2): tracepoints: Do not trace when cpu is offline tracing: Fix showing function event in available_events Takashi Iwai (19): ALSA: seq: Fix race at closing in virmidi driver ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check ALSA: pcm: Fix potential deadlock in OSS emulation ALSA: seq: Fix yet another races among ALSA timer accesses ALSA: timer: Fix link corruption due to double start or stop ALSA: hda - Add fixup for Mac Mini 7,1 model ALSA: Move EXPORT_SYMBOL() in appropriate places ALSA: rawmidi: Make snd_rawmidi_transmit() race-free ALSA: rawmidi: Fix race at copying & updating the position ALSA: seq: Fix lockdep warnings due to double mutex locks ALSA: timer: Fix leftover link at closing ALSA: hda - Fix speaker output from VAIO AiO machines ALSA: dummy: Implement timer backend switching more safely ALSA: timer: Fix wrong instance passed to slave callbacks ALSA: timer: Fix race between stop and interrupt ALSA: timer: Fix race at concurrent reads ALSA: seq: Drop superfluous error/debug messages after malloc failures ALSA: seq: Fix leak of pool buffer at concurrent writes ALSA: seq: Fix double port list deletion Tejun Heo (4): Revert "workqueue: make sure delayed work run in local cpu" libata: disable forced PORTS_IMPL for >= AHCI 1.3 libata: fix sff host state machine locking while polling workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup Tetsuo Handa (1): mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any progress Tony Lindgren (1): phy: twl4030-usb: Relase usb phy on unload Ursula Braun (1): af_iucv: Validate socket address length in iucv_sock_bind() Vinod Koul (1): ASoC: dpcm: fix the BE state on hw_free Wang, Rui Y (1): crypto: algif_hash - wait for crypto_ahash_init() to complete Willy Tarreau (1): pipe: limit the per-user amount of pages allocated in pipes Xin Long (1): sctp: translate network order to host order when users get a hmacid Yong Li (1): iio: dac: mcp4725: set iio name property in sysfs xuejiufei (1): ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery cleanup zengtao (1): cputime: Prevent 32bit overflow in time[val|spec]_to_cputime() -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html