This is the start of the stable review cycle for the 3.2.80 release. There are 115 patches in this series, which will be posted as responses to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat Apr 30 22:00:00 UTC 2016. Anything received after that time might be too late. A combined patch relative to 3.2.79 will be posted as an additional response to this. A shortlog and diffstat can be found below. Ben. ------------- Andy Lutomirski (2): x86/iopl/64: Properly context-switch IOPL on Xen PV [b7a584598aea7ca73140cb87b40319944dd3393f] x86/iopl: Fix iopl capability check on Xen PV [c29016cf41fe9fa994a5ecca607cf5f1cd98801e] Arnaldo Carvalho de Melo (1): net: Fix use after free in the recvmmsg exit path [34b88a68f26a75e4fded796f1a49c40f82234b7d] Arnd Bergmann (4): ath9k: fix buffer overrun for ar9287 [83d6f1f15f8cce844b0a131cbc63e444620e48b5] farsync: fix off-by-one bug in fst_add_one [e725a66c0202b5f36c2f9d59d26a65c53bbf21f7] lpfc: fix misleading indentation [aeb6641f8ebdd61939f462a8255b316f9bfab707] mac80211: avoid excessive stack usage in sta_info [0ef049dc1167fe834d0ad5d63f89eddc5c70f6e4] Aurelien Jacquiot (1): rapidio/rionet: fix deadlock on SMP [36915976eca58f2eefa040ba8f9939672564df61] Benjamin Tissoires (1): Input: synaptics - handle spurious release of trackstick buttons, again [82be788c96ed5978d3cb4a00079e26b981a3df3f] Bjorn Helgaas (2): PCI: Disable IO/MEM decoding for devices with non-compliant BARs [b84106b4e2290c081cdab521fa832596cdfea246] x86/PCI: Mark Broadwell-EP Home Agent & PCU as having non-compliant BARs [b894157145e4ac7598d7062bc93320898a5e059e] Bjørn Mork (1): cdc_ncm: toggle altsetting to force reset before setup [48906f62c96cc2cd35753e59310cb70eb08cc6a5] Boris Ostrovsky (1): xen/events: Mask a moving irq [ff1e22e7a638a0782f54f81a6c9cb139aca2da35] Dan Carpenter (2): EDAC, amd64_edac: Shift wrapping issue in f1x_get_norm_dct_addr() [6f3508f61c814ee852c199988a62bd954c50dfc1] ethernet: micrel: fix some error codes [3af0d554c1ce11e9d0953381ff566271f9ab81a9] David S. Miller (1): ipv4: Don't do expensive useless work during inetdev destroy. [fbd40ea0180a2d328c5adc61414dc8bab9335ce2] Diego Viola (1): net: jme: fix suspend/resume on JMC260 [ee50c130c82175eaa0820c96b6d3763928af2241] DingXiang (1): dm snapshot: disallow the COW and origin devices from being identical [4df2bf466a9c9c92f40d27c4aa9120f4e8227bfc] Dmitry Tunin (4): Bluetooth: Add new AR3012 ID 0489:e095 [28c971d82fb58ef7cba22e5308be6d2d2590473d] Bluetooth: btusb: Add a new AR3012 ID 04ca:3014 [81d90442eac779938217c3444b240aa51fd3db47] Bluetooth: btusb: Add a new AR3012 ID 13d3:3472 [75c6aca4765dbe3d0c1507ab5052f2e373dc2331] Bluetooth: btusb: Add new AR3012 ID 13d3:3395 [609574eb46335cfac1421a07c0505627cbbab1f0] Douglas Gilbert (1): sg: fix dxferp in from_to case [5ecee0a3ee8d74b6950cb41e8989b0c2174568d4] Eric Dumazet (3): ipv4: fix memory leaks in ip_cmsg_send() callers [919483096bfe75dda338e98d56da91a263746a0a] ipv6: update skb->csum when CE mark is propagated [34ae6a1aa0540f0f781dd265366036355fdc8930] phonet: properly unshare skbs in phonet_rcv() [7aaed57c5c2890634cfadf725173c7c68ea4cb4f] Eryu Guan (1): ext4: fix NULL pointer dereference in ext4_mark_inode_dirty() [5e1021f2b6dff1a86a468a1424d59faae2bc63c1] Florian Westphal (4): connector: bump skb->users before callback invocation [55285bf09427c5abf43ee1d54e892f352092b1f1] netfilter: x_tables: fix unconditional helper [54d83fc74aa9ec72794373cb47432c5f7fb1a309] netfilter: x_tables: make sure e->next_offset covers remaining blob size [6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91] netfilter: x_tables: validate e->target_offset early [bdf533de6968e9686df777dc178486f600c6e617] Geert Uytterhoeven (2): rtc: vr41xx: Wire up alarm_irq_enable [a25f4a95ec3cded34c1250364eba704c5e4fdac4] serial: sh-sci: Remove cpufreq notifier to fix crash/deadlock [ff1cab374ad98f4b9f408525ca9c08992b4ed784] Guenter Roeck (2): MAINTAINERS: Update mailing list and web page for hwmon subsystem [968ce1b1f45a7d76b5471b19bd035dbecc72f32d] hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated [3c2e2266a5bd2d1cef258e6e54dca1d99946379f] Guillaume Nault (3): ppp: ensure file->private_data can't be overridden [e8e56ffd9d2973398b60ece1f1bebb8d67b4d032] ppp: take reference on channels netns [1f461dcdd296eecedaffffc6bae2bfa90bd7eb89] pppoe: fix reference counting in PPPoE proxy [29e73269aa4d36f92b35610c25f8b01c789b0dc8] Guo-Fu Tseng (2): jme: Do not enable NIC WoL functions on S0 [0772a99b818079e628a1da122ac7ee023faed83e] jme: Fix device PM wakeup API usage [81422e672f8181d7ad1ee6c60c723aac649f538f] Haishuang Yan (1): ipv4: l2tp: fix a potential issue in l2tp_ip_recv [5745b8232e942abd5e16e85fa9b27cc21324acf0] Hangbin Liu (1): net/ipv6: add sysctl option accept_ra_min_hop_limit [8013d1d7eafb0589ca766db6b74026f76b7f5cb4] Hannes Frederic Sowa (1): bridge: Only call /sbin/bridge-stp for the initial network namespace [ff62198553e43cdffa9d539f6165d3e83f8a42bc] Hannes Reinecke (1): bio: return EINTR if copying to user space got interrupted [2d99b55d378c996b9692a0c93dd25f4ed5d58934] Hans de Goede (3): [media] bttv: Width must be a multiple of 16 when capturing planar formats [5c915c68763889f0183a1cc61c84bb228b60124a] [media] pwc: Add USB id for Philips Spc880nc webcam [7445e45d19a09e5269dc85f17f9635be29d2f76c] [media] saa7134: Fix bytesperline not being set correctly for planar formats [3e71da19f9dc22e39a755d6ae9678661abb66adc] Hector Marco-Gisbert (1): x86/mm/32: Enable full randomization on i386 and X86_32 [8b8addf891de8a00e4d39fc32f93f7c5eb8feceb] Helge Deller (3): parisc: Avoid function pointers for kernel exception routines [e3893027a300927049efc1572f852201eb785142] parisc: Fix kernel crash with reversed copy_from_user() [ef72f3110d8b19f4c098a0bff7ed7d11945e70c6] parisc: Unbreak handling exceptions from kernel modules [2ef4dfd9d9f288943e249b78365a69e3ea3ec072] Ignat Korchagin (1): USB: usbip: fix potential out-of-bounds write [b348d7dddb6c4fbfc810b7a0626e8ec9e29f7cbb] J. Bruce Fields (2): nfsd4: fix bad bounds checking [4aed9c46afb80164401143aa0fdcfe3798baa9d5] nfsd: fix deadlock secinfo+readdir compound [2f6fc056e899bd0144a08da5cacaecbe8997cd74] Jakub Sitnicki (1): ipv6: Count in extension headers in skb->network_header [3ba3458fb9c050718b95275a3310b74415e767e2] Jann Horn (1): fs/coredump: prevent fsuid=0 dumps into user-controlled directories [378c6520e7d29280f400ef2ceaf155c86f05a71a] Joseph Qi (2): ocfs2/dlm: fix BUG in dlm_move_lockres_to_recovery_list [be12b299a83fc807bbaccd2bcb8ec50cbb0cb55c] ocfs2/dlm: fix race between convert and recovery [ac7cf246dfdbec3d8fed296c7bf30e16f5099dac] Josh Boyer (3): Input: powermate - fix oops with malicious USB descriptors [9c6ba456711687b794dcf285856fc14e2c76074f] USB: iowarrior: fix oops with malicious USB descriptors [4ec0ef3a82125efc36173062a50624550a900ae0] USB: serial: ftdi_sio: Add support for ICP DAS I-756xU devices [ea6db90e750328068837bed34cb1302b7a177339] Kees Cook (1): x86: standardize mmap_rnd() usage [82168140bc4cec7ec9bad39705518541149ff8b7] Manfred Rudigier (1): net: dp83640: Fix tx timestamp overflow handling. [81e8f2e930fe76b9814c71b9d87c30760b5eb705] Manish Chopra (1): qlge: Fix receive packets drop. [2c9a266afefe137bff06bbe0fc48b4d3b3cb348c] Marco Angaroni (1): ipvs: correct initial offset of Call-ID header search in SIP persistence engine [7617a24f83b5d67f4dab1844956be1cebc44aec8] Mario Kleiner (1): drm/radeon: Don't drop DP 2.7 Ghz link setup on some cards. [459ee1c3fd097ab56ababd8ff4bb7ef6a792de33] Martin K. Petersen (1): sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes [f08bb1e0dbdd0297258d0b8cd4dbfcc057e57b2a] Martyn Welch (1): USB: serial: cp210x: Adding GE Healthcare Device ID [cddc9434e3dcc37a85c4412fb8e277d3a582e456] Mateusz Guzik (1): xfs: fix two memory leaks in xfs_attr_list.c error paths [2e83b79b2d6c78bf1b4aa227938a214dcbddc83f] Maurizio Lombardi (1): be2iscsi: set the boot_kset pointer to NULL in case of failure [84bd64993f916bcf86270c67686ecf4cea7b8933] Michael Hennerich (1): drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors [f3df53e4d70b5736368a8fe8aa1bb70c1cb1f577] Michael S. Tsirkin (1): watchdog: rc32434_wdt: fix ioctl error handling [10e7ac22cdd4d211cef99afcb9371b70cb175be6] Nate Dailey (1): raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang [ccfc7bf1f09d6190ef86693ddc761d5fe3fa47cb] Neal Cardwell (1): tcp_yeah: don't set ssthresh below 2 [83d15e70c4d8909d722c0d64747d8fb42e38a48f] Neil Horman (1): sctp: Fix port hash table size computation [d9749fb5942f51555dc9ce1ac0dbb1806960a975] OGAWA Hirofumi (1): jbd2: fix FS corruption possibility in jbd2_journal_destroy() on umount path [c0a2ad9b50dd80eeccd73d9ff962234590d5ec93] Oliver Neukum (8): USB: cdc-acm: more sanity checking [8835ba4a39cf53f705417b3b3a94eb067673f2c9] USB: cypress_m8: add endpoint sanity check [c55aee1bf0e6b6feec8b2927b43f7a09a6d5f754] USB: digi_acceleport: do sanity checking for the number of ports [5a07975ad0a36708c6b0a5b9fea1ff811d0b0c1f] USB: mct_u232: add sanity checking in probe [4e9a0b05257f29cf4b75f3209243ed71614d062e] USB: usb_driver_claim_interface: add sanity checking [0b818e3956fc1ad976bee791eadcbb3b5fec5bfd] usb: hub: fix a typo in hub_port_init() leading to wrong logic [0d5ce778c43bf888328231bcdce05d5c860655aa] usb: retry reset if a device times out [264904ccc33c604d4b3141bbd33808152dfac45b] usbnet: cleanup after bind() in probe() [1666984c8625b3db19a9abc298931d35ab7bc64b] Paolo Abeni (1): ipv6/udp: use sticky pktinfo egress ifindex on connect() [1cdda91871470f15e79375991bd2eddc6e86ddb1] Peter Hurley (1): net: irda: Fix use-after-free in irtty_open() [401879c57f01cbf2da204ad2e8db910525c6dbea] Rabin Vincent (1): splice: handle zero nr_pages in splice_to_pipe() [d6785d9152147596f60234157da2b02540c3e60f] Radim Krčmář (1): KVM: i8254: change PIT discard tick policy [7dd0fdff145c5be7146d0ac06732ae3613412ac1] Raghava Aditya Renukunta (1): aacraid: Fix memory leak in aac_fib_map_free [f88fa79a61726ce9434df9b4aede36961f709f17] Sebastian Frias (1): 8250: use callbacks to access UART_DLL/UART_DLM [0b41ce991052022c030fd868e03877700220b090] Sergei Shtylyov (1): sh_eth: fix NULL pointer dereference in sh_eth_ring_format() [c1b7fca65070bfadca94dd53a4e6b71cd4f69715] Shaohua Li (1): raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang [23ddba80ebe836476bb2fa1f5ef305dd1c63dc0b] Steven Rostedt (2): tracing: Fix crash from reading trace_pipe with sendfile [a29054d9478d0435ab01b7544da4f674ab13f533] tracing: Have preempt(irqs)off trace preempt disabled functions [cb86e05390debcc084cfdb0a71ed4c5dbbec517d] Subashab@xxxxxxxxxxxxxx (1): xfrm: Fix crash observed during device unregistration and decryption [071d36bf21bcc837be00cea55bcef8d129e7f609] Sudip Mukherjee (1): mac80211: fix memory leak [ea32f065bd3e3e09f0bcb3042f1664caf6b3e233] Takashi Iwai (4): ALSA: timer: Use mod_timer() for rearming the system timer [4a07083ed613644c96c34a7dd2853dc5d7c70902] ALSA: usb-audio: Add sanity checks for endpoint accesses [447d6275f0c21f6cc97a88b3a0c601436a4cdf2a] ALSA: usb-audio: Fix NULL dereference in create_fixed_stream_quirk() [0f886ca12765d20124bd06291c82951fd49a33be] ALSA: usb-audio: Minor code cleanup in create_fixed_stream_quirk() [902eb7fd1e4af3ac69b9b30f8373f118c92b9729] Thomas Gleixner (1): sched/cputime: Fix steal time accounting vs. CPU hotplug [e9532e69b8d1d1284e8ecf8d2586de34aec61244] Ursula Braun (1): af_iucv: Validate socket address length in iucv_sock_bind() [52a82e23b9f2a9e1d429c5207f8575784290d008] Vijay Pandurangan (1): veth: don’t modify ip_summed; doing so treats packets with bad checksums as good. [ce8c839b74e3017996fad4e1b7ba2e2625ede82f] Vittorio Gambaletta (1): ALSA: intel8x0: Add clock quirk entry for AD1981B on IBM ThinkPad X41. [4061db03dd71d195b9973ee466f6ed32f6a3fc16] Vladis Dronov (2): ALSA: usb-audio: Fix double-free in error paths after snd_usb_add_audio_stream() call [836b34a935abc91e13e63053d0a83b24dfb5ea78] Input: ati_remote2 - fix crashes on detecting device with invalid descriptor [950336ba3e4a1ffd2ca60d29f6ef386dd2c7351d] Willem de Bruijn (3): ax25: add link layer header validation function [ea47781c26510e5d97f80f9aceafe9065bd5e3aa] macvtap: always pass ethernet header in linear [8e2ad4113ce4671686740f808ff2795395c39eef] net: validate variable length ll headers [2793a23aacbd754dbbb5cb75093deb7e4103bace] Xin Long (2): sctp: lack the check for ports in sctp_v6_cmp_addr [40b4f0fd74e46c017814618d67ec9127ff20f157] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close [068d8bd338e855286aea54e70d1c101569284b21] Yoshihiro Shimoda (3): usb: renesas_usbhs: avoid NULL pointer derefernce in usbhsf_pkt_handler() [894f2fc44f2f3f48c36c973b1123f6ab298be160] usb: renesas_usbhs: disable TX IRQ before starting TX DMAC transfer [6490865c67825277b29638e839850882600b48ec] usb: renesas_usbhs: fix to avoid using a disabled ep in usbhsg_queue_done() [4fccb0767fdbdb781a9c5b5c15ee7b219443c89d] Yuki Shibuya (1): KVM: x86: Inject pending interrupt even if pending nmi exist [321c5658c5e9192dea0d58ab67cf1791e45b2b26] Documentation/networking/ip-sysctl.txt | 8 +++ MAINTAINERS | 82 ++++++++++++++-------------- Makefile | 4 +- arch/parisc/include/asm/uaccess.h | 1 + arch/parisc/kernel/asm-offsets.c | 1 + arch/parisc/kernel/parisc_ksyms.c | 10 ++-- arch/parisc/kernel/traps.c | 3 + arch/parisc/lib/fixup.S | 6 ++ arch/parisc/mm/fault.c | 1 + arch/um/drivers/mconsole_kern.c | 2 +- arch/x86/include/asm/xen/hypervisor.h | 2 + arch/x86/kernel/ioport.c | 7 ++- arch/x86/kernel/process_64.c | 12 ++++ arch/x86/kvm/i8254.c | 12 ++-- arch/x86/kvm/x86.c | 12 ++-- arch/x86/mm/mmap.c | 44 ++++++--------- arch/x86/pci/fixup.c | 7 +++ arch/x86/xen/enlighten.c | 2 +- drivers/bluetooth/ath3k.c | 8 +++ drivers/bluetooth/btusb.c | 4 ++ drivers/connector/connector.c | 11 +--- drivers/edac/amd64_edac.c | 2 +- drivers/gpu/drm/radeon/atombios_encoders.c | 6 +- drivers/hwmon/max1111.c | 6 ++ drivers/input/misc/ati_remote2.c | 36 ++++++++++-- drivers/input/misc/powermate.c | 3 + drivers/input/mouse/synaptics.c | 5 +- drivers/md/dm-snap.c | 9 +++ drivers/md/dm-table.c | 37 +++++++++---- drivers/md/raid1.c | 7 ++- drivers/md/raid10.c | 7 ++- drivers/media/video/bt8xx/bttv-driver.c | 26 +++++++-- drivers/media/video/pwc/pwc-if.c | 6 ++ drivers/media/video/saa7134/saa7134-video.c | 18 ++++-- drivers/misc/ad525x_dpot.c | 2 +- drivers/net/ethernet/jme.c | 26 +++++---- drivers/net/ethernet/micrel/ks8842.c | 10 ++-- drivers/net/ethernet/qlogic/qlge/qlge_main.c | 11 ++++ drivers/net/ethernet/renesas/sh_eth.c | 3 +- drivers/net/irda/irtty-sir.c | 10 ---- drivers/net/macvtap.c | 9 ++- drivers/net/phy/dp83640.c | 17 ++++++ drivers/net/ppp/ppp_generic.c | 35 +++++++----- drivers/net/ppp/pppoe.c | 2 + drivers/net/rionet.c | 4 +- drivers/net/usb/cdc_ncm.c | 6 +- drivers/net/usb/usbnet.c | 7 +++ drivers/net/veth.c | 5 -- drivers/net/wan/farsync.c | 2 +- drivers/net/wireless/ath/ath9k/eeprom.c | 7 +-- drivers/pci/probe.c | 14 +++++ drivers/rtc/rtc-vr41xx.c | 13 +++-- drivers/scsi/aacraid/commsup.c | 9 ++- drivers/scsi/be2iscsi/be_main.c | 1 + drivers/scsi/lpfc/lpfc_init.c | 5 +- drivers/scsi/sd.c | 23 +++----- drivers/scsi/sd.h | 7 ++- drivers/scsi/sg.c | 3 +- drivers/staging/usbip/usbip_common.c | 11 ++++ drivers/tty/serial/8250.c | 18 ++---- drivers/tty/serial/sh-sci.c | 37 ------------- drivers/usb/class/cdc-acm.c | 3 + drivers/usb/core/driver.c | 6 +- drivers/usb/core/hub.c | 16 ++++-- drivers/usb/misc/iowarrior.c | 6 ++ drivers/usb/renesas_usbhs/fifo.c | 4 +- drivers/usb/renesas_usbhs/mod_gadget.c | 6 +- drivers/usb/serial/cp210x.c | 1 + drivers/usb/serial/cypress_m8.c | 11 ++-- drivers/usb/serial/digi_acceleport.c | 18 ++++++ drivers/usb/serial/ftdi_sio.c | 4 ++ drivers/usb/serial/ftdi_sio_ids.h | 8 +++ drivers/usb/serial/mct_u232.c | 6 ++ drivers/watchdog/rc32434_wdt.c | 2 +- drivers/xen/events.c | 34 ++++++++++-- fs/bio.c | 12 ++-- fs/exec.c | 30 ++++++++-- fs/ext4/inode.c | 6 +- fs/fhandle.c | 2 +- fs/jbd2/journal.c | 17 ++++-- fs/nfsd/nfs4proc.c | 1 + fs/nfsd/nfs4xdr.c | 13 +++-- fs/ocfs2/dlm/dlmconvert.c | 24 +++++++- fs/ocfs2/dlm/dlmrecovery.c | 1 - fs/open.c | 6 +- fs/splice.c | 3 + fs/xfs/xfs_attr_leaf.c | 19 ++++--- include/linux/device-mapper.h | 2 + include/linux/fs.h | 2 +- include/linux/ipv6.h | 3 + include/linux/netdevice.h | 21 ++++++- include/linux/pci.h | 1 + include/net/inet_ecn.h | 19 ++++++- kernel/sched.c | 14 +++++ kernel/sysctl_binary.c | 2 +- kernel/trace/trace.c | 5 +- kernel/trace/trace_irqsoff.c | 8 ++- net/ax25/ax25_ip.c | 15 +++++ net/bridge/br_stp_if.c | 5 +- net/ipv4/devinet.c | 4 ++ net/ipv4/fib_frontend.c | 4 ++ net/ipv4/ip_gre.c | 2 +- net/ipv4/ip_sockglue.c | 2 + net/ipv4/netfilter/arp_tables.c | 41 +++++++------- net/ipv4/netfilter/ip_tables.c | 46 ++++++++-------- net/ipv4/netfilter/ipt_MASQUERADE.c | 12 +++- net/ipv4/ping.c | 4 +- net/ipv4/raw.c | 4 +- net/ipv4/tcp_yeah.c | 2 +- net/ipv4/udp.c | 4 +- net/ipv6/addrconf.c | 10 ++++ net/ipv6/datagram.c | 3 + net/ipv6/ip6_output.c | 9 ++- net/ipv6/ip6_tunnel.c | 2 +- net/ipv6/ndisc.c | 16 +++--- net/ipv6/netfilter/ip6_tables.c | 46 ++++++++-------- net/ipv6/sit.c | 2 +- net/ipv6/xfrm6_mode_tunnel.c | 2 +- net/iucv/af_iucv.c | 3 + net/l2tp/l2tp_ip.c | 8 ++- net/mac80211/sta_info.c | 17 ++++-- net/netfilter/ipvs/ip_vs_pe_sip.c | 2 +- net/phonet/af_phonet.c | 4 ++ net/sctp/ipv6.c | 2 + net/sctp/protocol.c | 47 +++++++++++++--- net/sctp/sm_statefuns.c | 6 +- net/sctp/socket.c | 3 +- net/socket.c | 38 ++++++------- net/xfrm/xfrm_input.c | 3 + sound/core/timer.c | 4 +- sound/pci/intel8x0.c | 1 + sound/usb/clock.c | 2 + sound/usb/pcm.c | 2 + sound/usb/quirks.c | 26 ++++++--- sound/usb/stream.c | 6 +- 135 files changed, 970 insertions(+), 479 deletions(-) -- Ben Hutchings Once a job is fouled up, anything done to improve it makes it worse. -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html