This is the start of the stable review cycle for the 3.10.16 release. There are 110 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun Oct 13 19:37:01 UTC 2013. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v3.0/stable-review/patch-3.10.16-rc1.gz and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 3.10.16-rc1 Kent Overstreet <kmo@xxxxxxxxxxxxx> bcache: Fix a null ptr deref regression Bjørn Mork <bjorn@xxxxxxx> net: qmi_wwan: add new Qualcomm devices David Herrmann <dh.herrmann@xxxxxxxxx> HID: uhid: allocate static minor Marcel Holtmann <marcel@xxxxxxxxxxxx> HID: uhid: add devname module alias Stefan Achatz <erazor_de@xxxxxxxxxxxxxxxxxxxxx> HID: roccat: add support for KonePureOptical v2 Josef Bacik <jbacik@xxxxxxxxxxxx> Btrfs: remove ourselves from the cluster list under lock Josef Bacik <jbacik@xxxxxxxxxxxx> Btrfs: skip subvol entries when checking if we've created a dir already Josef Bacik <jbacik@xxxxxxxxxxxx> Btrfs: change how we queue blocks for backref checking Martin Schwidefsky <schwidefsky@xxxxxxxxxx> s390: fix system call restart after inferior call Chris Metcalf <cmetcalf@xxxxxxxxxx> tile: use a more conservative __my_cpu_offset in CONFIG_PREEMPT Takashi Iwai <tiwai@xxxxxxx> ALSA: hda - Fix GPIO for Acer Aspire 3830TG Ben Skeggs <bskeggs@xxxxxxxxxx> drm/nouveau/bios/init: stub opcode 0xaa Mark Tinguely <tinguely@xxxxxxx> xfs: fix node forward in xfs_node_toosmall Lv Zheng <lv.zheng@xxxxxxxxx> ACPI / IPMI: Fix atomic context requirement of ipmi_msg_handler() Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx> dmaengine: imx-dma: fix slow path issue in prep_dma_cyclic Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx> dmaengine: imx-dma: fix callback path in tasklet Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx> dmaengine: imx-dma: fix lockdep issue between irqhandler and tasklet Rafał Miłecki <zajec5@xxxxxxxxx> Revert "drm/radeon: add missing hdmi callbacks for rv6xx" Frederic Weisbecker <fweisbec@xxxxxxxxx> irq: Force hardirq exit's softirq processing on its own stack Eric W. Biederman <ebiederm@xxxxxxxxxxxx> net: Update the sysctl permissions handler to test effective uid/gid Nicholas Bellinger <nab@xxxxxxxxxxxxxxx> iscsi-target: Only perform wait_for_tasks when performing shutdown Rafael Aquini <aquini@xxxxxxxxxx> mm: avoid reinserting isolated balloon pages into LRU lists Christian Lamparter <chunkeey@xxxxxxxxxxxxxx> p54usb: add USB ID for Corega WLUSB2GTST USB adapter Larry Finger <Larry.Finger@xxxxxxxxxxxx> rtlwifi: Align private space in rtl_priv struct Jack Wang <jinpu.wang@xxxxxxxxxxxxxxxx> ib_srpt: always set response for task management Nicholas Bellinger <nab@xxxxxxxxxxxxxxx> ib_srpt: Destroy cm_id before destroying QP. David Vrabel <david.vrabel@xxxxxxxxxx> xen/hvc: allow xenboot console to be used again Michal Malý <madcatxster@xxxxxxxxx> USB: serial: option: Ignore card reader interface on Huawei E1750 Bing Zhao <bzhao@xxxxxxxxxxx> mwifiex: fix PCIe hs_cfg cancel cmd timeout Amitkumar Karwar <akarwar@xxxxxxxxxxx> mwifiex: fix hang issue for USB chipsets Bing Zhao <bzhao@xxxxxxxxxxx> mwifiex: fix NULL pointer dereference in usb suspend handler Trond Myklebust <Trond.Myklebust@xxxxxxxxxx> NFSv4.1: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails Ian Abbott <abbotti@xxxxxxxxx> staging: comedi: ni_65xx: (bug fix) confine insn_bits to one subdevice Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> kernel/kmod.c: check for NULL in call_usermodehelper_exec() Darrick J. Wong <darrick.wong@xxxxxxxxxx> mm/bounce.c: fix a regression where MS_SNAP_STABLE (stable pages snapshotting) was ignored David Miller <davem@xxxxxxxxxxxxx> mm: Fix generic hugetlb pte check return type. Kirill Tkhai <tkhai@xxxxxxxxx> sparc32: Fix exit flag passed from traced sys_sigreturn Kirill Tkhai <tkhai@xxxxxxxxx> sparc64: Fix not SRA'ed %o5 in 32-bit traced syscall David S. Miller <davem@xxxxxxxxxxxxx> sparc64: Fix off by one in trampoline TLB mapping installation loop. Kees Cook <keescook@xxxxxxxxxxxx> sparc: fix ldom_reboot buffer overflow harder David S. Miller <davem@xxxxxxxxxxxxx> sparc64: Fix buggy strlcpy() conversion in ldom_reboot(). Kirill Tkhai <tkhai@xxxxxxxxx> sparc64: Remove RWSEM export leftovers Kirill Tkhai <tkhai@xxxxxxxxx> sparc64: Fix ITLB handler of null page David S. Miller <davem@xxxxxxxxxxxxx> esp_scsi: Fix tag state corruption when autosensing. Vyacheslav Dubeyko <slava@xxxxxxxxxxx> nilfs2: fix issue with race condition of competition between segments for dirty blocks Johan Hedberg <johan.hedberg@xxxxxxxxx> Bluetooth: Fix rfkill functionality during the HCI setup stage Johan Hedberg <johan.hedberg@xxxxxxxxx> Bluetooth: Introduce a new HCI_RFKILLED flag Raphael Kubo da Costa <rakuco@xxxxxxxxxxx> Bluetooth: Add support for BCM20702A0 [0b05, 17cb] Peng Chen <pengchen@xxxxxxxxxxxxxxxx> Bluetooth: Add a new PID/VID 0cf3/e005 for AR3012. Andre Guedes <andre.guedes@xxxxxxxxxxxxx> Bluetooth: Fix encryption key size for peripheral role Andre Guedes <andre.guedes@xxxxxxxxxxxxx> Bluetooth: Fix security level for peripheral role Arend van Spriel <arend@xxxxxxxxxxxx> brcmfmac: obtain platform data upon module initialization Maxim Patlasov <MPatlasov@xxxxxxxxxxxxx> fuse: fix fallocate vs. ftruncate race Maxim Patlasov <MPatlasov@xxxxxxxxxxxxx> fuse: wait for writeback in fuse_file_fallocate() Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx> powerpc: Restore registers on error exit from csum_partial_copy_generic() Madhavan Srinivasan <maddy@xxxxxxxxxxxxxxxxxx> powerpc/sysfs: Disable writing to PURR in guest mode Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx> powerpc: Fix parameter clobber in csum_partial_copy_generic() Prarit Bhargava <prarit@xxxxxxxxxx> powerpc/vio: Fix modalias_show return values Michael Neuling <mikey@xxxxxxxxxxx> powerpc/tm: Switch out userspace PPR and DSCR sooner Michael Ellerman <michael@xxxxxxxxxxxxxx> powerpc/perf: Fix handling of FAB events Nishanth Aravamudan <nacc@xxxxxxxxxxxxxxxxxx> powerpc/iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table() Dan Carpenter <dan.carpenter@xxxxxxxxxx> ASoC: ab8500-codec: info leak in anc_status_control_put() Dan Carpenter <dan.carpenter@xxxxxxxxxx> ASoC: 88pm860x: array overflow in snd_soc_put_volsw_2r_st() Dan Carpenter <dan.carpenter@xxxxxxxxxx> ASoC: max98095: a couple array underflows Javier Martinez Canillas <javier.martinez@xxxxxxxxxxxxxxx> gpio/omap: auto-setup a GPIO when used as an IRQ Javier Martinez Canillas <javier.martinez@xxxxxxxxxxxxxxx> gpio/omap: maintain GPIO and IRQ usage separately Dan Aloni <alonid@xxxxxxxxxxxxxxx> fs/binfmt_elf.c: prevent a coredump with a large vm_map_count from Oopsing Gabor Juhos <juhosg@xxxxxxxxxxx> avr32: fix clockevents kernel warning Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> ip6tnl: allow to use rtnl ops on fb tunnel Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> sit: allow to use rtnl ops on fb tunnel Steffen Klassert <steffen.klassert@xxxxxxxxxxx> ip_tunnel: Fix a memory corruption in ip_tunnel_xmit Ricardo Ribalda <ricardo.ribalda@xxxxxxxxx> ll_temac: Reset dma descriptors indexes on ndo_open Salam Noureddine <noureddine@xxxxxxxxxxxxxxxxxx> ipv6 mcast: use in6_dev_put in timer handlers instead of __in6_dev_put Salam Noureddine <noureddine@xxxxxxxxxxxxxxxxxx> ipv4 igmp: use in_dev_put in timer handlers instead of __in_dev_put Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx> ipv6: gre: correct calculation of max_headroom Neil Horman <nhorman@xxxxxxxxxxxxx> bonding: Fix broken promiscuity reference counting issue Peter Korsgaard <peter@xxxxxxxxxxxxx> dm9601: fix IFF_ALLMULTI handling Eric Dumazet <edumazet@xxxxxxxxxx> net: net_secret should not depend on TCP Catalin(ux) M. BOIE <catab@xxxxxxxxxxxxx> IPv6 NAT: Do not drop DNATed 6to4/6rd packets Roger Luethi <rl@xxxxxxxxxxx> via-rhine: fix VLAN priority field (PCP, IEEE 802.1p) Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx> ipv6: udp packets following an UFO enqueued packet need also be handled by UFO Ansis Atteka <aatteka@xxxxxxxxxx> ip: generate unique IP identificator if local fragmentation is allowed Ansis Atteka <aatteka@xxxxxxxxxx> ip: use ip_hdr() in __ip_make_skb() to retrieve IP header Duan Jiong <duanj.fnst@xxxxxxxxxxxxxx> net:dccp: do not report ICMP redirects to user space Daniel Borkmann <dborkman@xxxxxxxxxx> net: sctp: rfc4443: do not report ICMP redirects to user space Ding Zhi <zhi.ding@xxxxxxxxx> ip6_tunnels: raddr and laddr are inverted in nl msg Hong Zhiguo <zhiguohong@xxxxxxxxxxx> bridge: fix NULL pointer deref of br_port_get_rcu Hong Zhiguo <zhiguohong@xxxxxxxxxxx> bridge: use br_port_get_rtnl within rtnl lock Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> bridge: Clamp forward_delay when enabling STP Chris Healy <cphealy@xxxxxxxxx> resubmit bridge: fix message_age_timer calculation David Vrabel <david.vrabel@xxxxxxxxxx> xen-netback: count number required slots for an skb more carefully Daniel Borkmann <dborkman@xxxxxxxxxx> net: sctp: fix ipv6 ipsec encryption bug in sctp_v6_xmit Jason Wang <jasowang@xxxxxxxxxx> tuntap: correctly handle error in tun_set_iff() Nikolay Aleksandrov <nikolay@xxxxxxxxxx> netpoll: fix NULL pointer dereference in netpoll_cleanup Sonic Zhang <sonic.zhang@xxxxxxxxxx> netpoll: Should handle ETH_P_ARP other than ETH_P_IP in netpoll_neigh_reply Francois Romieu <romieu@xxxxxxxxxxxxx> r8169: enforce RX_MULTI_EN for the 8168f. Vimalkumar <j.vimal@xxxxxxxxx> net_sched: htb: fix a typo in htb_change_class() Eric Dumazet <edumazet@xxxxxxxxxx> net: flow_dissector: fix thoff for IPPROTO_AH Eric Dumazet <edumazet@xxxxxxxxxx> net: fix multiqueue selection Daniel Borkmann <dborkman@xxxxxxxxxx> net: sctp: fix smatch warning in sctp_send_asconf_del_ip Daniel Borkmann <dborkman@xxxxxxxxxx> net: sctp: fix bug in sctp_poll for SOCK_SELECT_ERR_QUEUE Daniel Borkmann <dborkman@xxxxxxxxxx> net: fib: fib6_add: fix potential NULL pointer dereference Jiri Pirko <jiri@xxxxxxxxxxx> ipv6/exthdrs: accept tlv which includes only padding Dave Jones <davej@xxxxxxxxxx> tcp: Add missing braces to do_tcp_setsockopt Dave Jones <davej@xxxxxxxxxx> caif: Add missing braces to multiline if in cfctrl_linkup_request Jiri Kosina <jkosina@xxxxxxx> HID: fix unused rsize usage Jiri Kosina <jkosina@xxxxxxx> HID: fix data access in implement() Dan Carpenter <dan.carpenter@xxxxxxxxxx> cciss: fix info leak in cciss_ioctl32_passthru() Dan Carpenter <dan.carpenter@xxxxxxxxxx> cpqarray: fix info leak in ida_locked_ioctl() Daniel Drake <dsd@xxxxxxxxxx> mwifiex: fix memory corruption when unsetting multicast list ------------- Diffstat: Makefile | 4 +- arch/avr32/kernel/time.c | 9 +- arch/powerpc/kernel/iommu.c | 2 +- arch/powerpc/kernel/sysfs.c | 18 ++- arch/powerpc/kernel/tm.S | 94 ++++++++---- arch/powerpc/kernel/vio.c | 12 +- arch/powerpc/lib/checksum_64.S | 58 +++++--- arch/powerpc/perf/power8-pmu.c | 5 +- arch/s390/kernel/entry.S | 1 + arch/s390/kernel/entry64.S | 1 + arch/sparc/kernel/ds.c | 5 +- arch/sparc/kernel/entry.S | 2 +- arch/sparc/kernel/ktlb.S | 3 +- arch/sparc/kernel/syscalls.S | 8 +- arch/sparc/kernel/trampoline_64.S | 2 - arch/sparc/lib/ksyms.c | 9 -- arch/tile/include/asm/percpu.h | 34 ++++- drivers/acpi/acpi_ipmi.c | 24 ++-- drivers/block/cciss.c | 1 + drivers/block/cpqarray.c | 1 + drivers/bluetooth/ath3k.c | 2 + drivers/bluetooth/btusb.c | 2 + drivers/dma/imx-dma.c | 31 ++-- drivers/gpio/gpio-omap.c | 158 +++++++++++++-------- drivers/gpu/drm/nouveau/core/subdev/bios/init.c | 19 ++- drivers/gpu/drm/radeon/radeon_asic.c | 2 - drivers/hid/hid-core.c | 20 ++- drivers/hid/hid-ids.h | 1 + drivers/hid/hid-logitech-dj.c | 12 +- drivers/hid/hid-picolcd_debugfs.c | 23 +-- drivers/hid/hid-roccat-konepure.c | 3 +- drivers/hid/uhid.c | 4 +- drivers/hid/usbhid/hid-core.c | 5 +- drivers/infiniband/ulp/srpt/ib_srpt.c | 14 +- drivers/md/bcache/request.c | 3 +- drivers/net/bonding/bond_main.c | 13 +- drivers/net/ethernet/realtek/r8169.c | 1 + drivers/net/ethernet/via/via-rhine.c | 9 +- drivers/net/ethernet/xilinx/ll_temac_main.c | 6 + drivers/net/ppp/pptp.c | 2 +- drivers/net/tun.c | 11 +- drivers/net/usb/dm9601.c | 2 +- drivers/net/usb/qmi_wwan.c | 130 ++++++++++++++++- .../net/wireless/brcm80211/brcmfmac/bcmsdh_sdmmc.c | 28 ++-- drivers/net/wireless/brcm80211/brcmfmac/dhd_bus.h | 3 +- .../net/wireless/brcm80211/brcmfmac/dhd_linux.c | 14 +- drivers/net/wireless/brcm80211/brcmfmac/usb.c | 2 +- drivers/net/wireless/mwifiex/11n_aggr.c | 3 +- drivers/net/wireless/mwifiex/11n_aggr.h | 2 +- drivers/net/wireless/mwifiex/cmdevt.c | 5 +- drivers/net/wireless/mwifiex/main.c | 5 +- drivers/net/wireless/mwifiex/sta_ioctl.c | 18 ++- drivers/net/wireless/mwifiex/usb.c | 7 - drivers/net/wireless/mwifiex/wmm.c | 3 +- drivers/net/wireless/p54/p54usb.c | 1 + drivers/net/wireless/rtlwifi/wifi.h | 2 +- drivers/net/xen-netback/netback.c | 94 ++++++++---- drivers/scsi/esp_scsi.c | 14 +- drivers/scsi/esp_scsi.h | 1 + drivers/staging/comedi/drivers/ni_65xx.c | 25 ++-- drivers/target/iscsi/iscsi_target_util.c | 4 +- drivers/tty/hvc/hvc_xen.c | 1 + drivers/usb/serial/option.c | 3 + fs/binfmt_elf.c | 30 ++-- fs/btrfs/extent-tree.c | 3 +- fs/btrfs/relocation.c | 14 +- fs/btrfs/send.c | 3 +- fs/fuse/file.c | 23 ++- fs/nfs/nfs4filelayoutdev.c | 18 +-- fs/nilfs2/page.c | 2 + fs/nilfs2/segment.c | 11 +- fs/xfs/xfs_da_btree.c | 5 +- include/asm-generic/hugetlb.h | 4 +- include/linux/balloon_compaction.h | 25 ++++ include/linux/hid.h | 1 + include/linux/miscdevice.h | 1 + include/net/addrconf.h | 4 + include/net/bluetooth/hci.h | 1 + include/net/ip.h | 12 +- include/net/secure_seq.h | 1 - kernel/kmod.c | 4 + kernel/softirq.c | 15 +- mm/bounce.c | 2 + mm/migrate.c | 2 +- mm/vmscan.c | 4 +- net/bluetooth/hci_core.c | 26 +++- net/bluetooth/hci_event.c | 6 +- net/bluetooth/hidp/core.c | 15 +- net/bridge/br_netlink.c | 4 +- net/bridge/br_private.h | 8 +- net/bridge/br_stp.c | 23 ++- net/bridge/br_stp_if.c | 12 +- net/caif/cfctrl.c | 3 +- net/core/flow_dissector.c | 6 +- net/core/netpoll.c | 11 +- net/core/secure_seq.c | 27 +++- net/dccp/ipv6.c | 1 + net/ipv4/af_inet.c | 4 +- net/ipv4/igmp.c | 8 +- net/ipv4/inetpeer.c | 4 +- net/ipv4/ip_output.c | 8 +- net/ipv4/ip_tunnel.c | 12 +- net/ipv4/ipmr.c | 2 +- net/ipv4/raw.c | 2 +- net/ipv4/tcp.c | 3 +- net/ipv4/xfrm4_mode_tunnel.c | 2 +- net/ipv6/addrconf.c | 27 ++++ net/ipv6/exthdrs.c | 6 - net/ipv6/ip6_fib.c | 2 +- net/ipv6/ip6_gre.c | 4 +- net/ipv6/ip6_output.c | 53 +++---- net/ipv6/ip6_tunnel.c | 5 +- net/ipv6/mcast.c | 4 +- net/ipv6/sit.c | 87 +++++++++--- net/netfilter/ipvs/ip_vs_xmit.c | 2 +- net/sched/sch_htb.c | 2 +- net/sctp/input.c | 3 +- net/sctp/ipv6.c | 44 ++---- net/sctp/socket.c | 5 +- net/sysctl_net.c | 4 +- sound/pci/hda/patch_conexant.c | 11 ++ sound/soc/codecs/88pm860x-codec.c | 3 + sound/soc/codecs/ab8500-codec.c | 7 +- sound/soc/codecs/max98095.c | 4 +- 124 files changed, 1116 insertions(+), 530 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html