This is the start of the stable review cycle for the 4.4.181 release. There are 241 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Tue 11 Jun 2019 04:39:53 PM UTC. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.181-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.4.181-rc1 Kirill Smelkov <kirr@xxxxxxxxxx> fuse: Add FOPEN_STREAM to use stream_open() Kirill Smelkov <kirr@xxxxxxxxxx> fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock Patrik Jakobsson <patrik.r.jakobsson@xxxxxxxxx> drm/gma500/cdv: Check vbt config bits when detecting lvds panels Dan Carpenter <dan.carpenter@xxxxxxxxxx> genwqe: Prevent an integer overflow in the ioctl Paul Burton <paul.burton@xxxxxxxx> MIPS: pistachio: Build uImage.gz by default Miklos Szeredi <mszeredi@xxxxxxxxxx> fuse: fallocate: fix return with locked inode John David Anglin <dave.anglin@xxxxxxxx> parisc: Use implicit space register selection for loading the coherence index of I/O pdirs Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> rcu: locking and unlocking need to always be at least barriers Paolo Abeni <pabeni@xxxxxxxxxx> pktgen: do not sleep with the thread lock held. Zhu Yanjun <yanjun.zhu@xxxxxxxxxx> net: rds: fix memory leak in rds_ib_flush_mr_pool Erez Alfasi <ereza@xxxxxxxxxxxx> net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query David Ahern <dsahern@xxxxxxxxx> neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit Vivien Didelot <vivien.didelot@xxxxxxxxx> ethtool: fix potential userspace buffer overflow Nadav Amit <namit@xxxxxxxxxx> media: uvcvideo: Fix uvc_alloc_entity() allocation alignment Peter Chen <peter.chen@xxxxxxx> usb: gadget: fix request length error for isoc transfer Bjørn Mork <bjorn@xxxxxxx> net: cdc_ncm: GetNtbFormat endian fix Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "x86/build: Move _etext to actual end of .text" Oleg Nesterov <oleg@xxxxxxxxxx> userfaultfd: don't pin the user memory in userfaultfd_file_create() Arend van Spriel <arend.vanspriel@xxxxxxxxxxxx> brcmfmac: add subtype check for event handling in data path Arend Van Spriel <arend.vanspriel@xxxxxxxxxxxx> brcmfmac: add length checks in scheduled scan result handler Gavin Li <git@xxxxxxxxxxxxxx> brcmfmac: fix incorrect event channel deduction Arend van Spriel <arend@xxxxxxxxxxxx> brcmfmac: revise handling events in receive path Franky Lin <franky.lin@xxxxxxxxxxxx> brcmfmac: screening firmware event packet Hante Meuleman <meuleman@xxxxxxxxxxxx> brcmfmac: Add length checks on firmware events Daniel Axtens <dja@xxxxxxxxxx> bnx2x: disable GSO where gso_size is too big for hardware Daniel Axtens <dja@xxxxxxxxxx> net: create skb_gso_validate_mac_len() Todd Kjos <tkjos@xxxxxxxxxxx> binder: replace "%p" with "%pK" Ben Hutchings <ben.hutchings@xxxxxxxxxxxxxxx> binder: Replace "%p" with "%pK" for stable Roberto Bergantinos Corpas <rbergant@xxxxxxxxxx> CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM Zhenliang Wei <weizhenliang@xxxxxxxxxx> kernel/signal.c: trace_signal_deliver when signal_group_exit Jiri Slaby <jslaby@xxxxxxx> memcg: make it work on sparse non-0-node systems Joe Burmeister <joe.burmeister@xxxxxxxxxxxxx> tty: max310x: Fix external crystal register setup Jorge Ramirez-Ortiz <jorge.ramirez-ortiz@xxxxxxxxxx> tty: serial: msm_serial: Fix XON/XOFF Lyude Paul <lyude@xxxxxxxxxx> drm/nouveau/i2c: Disable i2c bus access after ->fini() Kailang Yang <kailang@xxxxxxxxxxx> ALSA: hda/realtek - Set default power save node to 0 Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix race updating log root item during fsync Steffen Maier <maier@xxxxxxxxxxxxx> scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) Steffen Maier <maier@xxxxxxxxxxxxx> scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove Mauro Carvalho Chehab <mchehab+samsung@xxxxxxxxxx> media: smsusb: better handle optional alignment Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> media: usb: siano: Fix false-positive "uninitialized variable" warning Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> media: usb: siano: Fix general protection fault in smsusb Oliver Neukum <oneukum@xxxxxxxx> USB: rio500: fix memory leak in close after disconnect Oliver Neukum <oneukum@xxxxxxxx> USB: rio500: refuse more than one device at a time Maximilian Luz <luzmaximilian@xxxxxxxxx> USB: Add LPM quirk for Surface Dock GigE adapter Oliver Neukum <oneukum@xxxxxxxx> USB: sisusbvga: fix oops in error path of sisusb_probe Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor Carsten Schmid <carsten_schmid@xxxxxxxxxx> usb: xhci: avoid null pointer deref when bos field is NULL Andrey Smirnov <andrew.smirnov@xxxxxxxxx> xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx> include/linux/bitops.h: sanitize rotate primitives James Clarke <jrtc27@xxxxxxxxxx> sparc64: Fix regression in non-hypervisor TLB flush xcall Junwei Hu <hujunwei4@xxxxxxxxxx> tipc: fix modprobe tipc failed after switch order of device registration -v2 David S. Miller <davem@xxxxxxxxxxxxx> Revert "tipc: fix modprobe tipc failed after switch order of device registration" Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx> xen/pciback: Don't disable PCI_COMMAND on PCI device reset. Daniel Axtens <dja@xxxxxxxxxx> crypto: vmx - ghash: do nosimd fallback manually Antoine Tenart <antoine.tenart@xxxxxxxxxxx> net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value Michael Chan <michael.chan@xxxxxxxxxxxx> bnxt_en: Fix aggregation buffer leak under OOM condition. Chris Packham <chris.packham@xxxxxxxxxxxxxxxxxxx> tipc: Avoid copying bytes beyond the supplied data Kloetzke Jan <Jan.Kloetzke@xxxxxxx> usbnet: fix kernel crash after disconnect Jisheng Zhang <Jisheng.Zhang@xxxxxxxxxxxxx> net: stmmac: fix reset gpio free missing Eric Dumazet <edumazet@xxxxxxxxxx> net-gro: fix use-after-free read in napi_gro_frags() Eric Dumazet <edumazet@xxxxxxxxxx> llc: fix skb leak in llc_build_and_send_ui_pkt() Mike Manning <mmanning@xxxxxxxxxxxxxxxxxxx> ipv6: Consider sk_bound_dev_if when binding a raw socket to an address Arnd Bergmann <arnd@xxxxxxxx> ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM Chris Lesiak <chris.lesiak@xxxxxxxxx> spi: Fix zero length xfer bug Geert Uytterhoeven <geert+renesas@xxxxxxxxx> spi: rspi: Fix sequencer reset during initialization Aditya Pakki <pakki001@xxxxxxx> spi : spi-topcliff-pch: Fix to handle empty DMA buffers James Smart <jsmart2021@xxxxxxxxx> scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices Arnd Bergmann <arnd@xxxxxxxx> media: saa7146: avoid high stack usage with clang Arnd Bergmann <arnd@xxxxxxxx> media: go7007: avoid clang frame overflow warning with KASAN James Hutchinson <jahutchinson99@xxxxxxxxxxxxxx> media: m88ds3103: serialize reset messages in m88ds3103_set_frontend Arnd Bergmann <arnd@xxxxxxxx> scsi: qla4xxx: avoid freeing unallocated dma memory Tony Lindgren <tony@xxxxxxxxxxx> usb: core: Add PM runtime calls to usb_hcd_platform_shutdown Paul E. McKenney <paulmck@xxxxxxxxxxxxx> rcutorture: Fix cleanup path for invalid torture_type strings Kangjie Lu <kjlu@xxxxxxx> tty: ipwireless: fix missing checks for ioremap Pankaj Gupta <pagupta@xxxxxxxxxx> virtio_console: initialize vtermno value for ports Dan Carpenter <dan.carpenter@xxxxxxxxxx> media: wl128x: prevent two potential buffer overflows Sowjanya Komatineni <skomatineni@xxxxxxxxxx> spi: tegra114: reset controller on probe Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> cxgb3/l2t: Fix undefined behaviour Wen Yang <wen.yang99@xxxxxxxxxx> ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put Wen Yang <wen.yang99@xxxxxxxxxx> ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put Nicolas Saenz Julienne <nsaenzjulienne@xxxxxxx> HID: core: move Usage Page concatenation to Main item Chengguang Xu <cgxu519@xxxxxxx> chardev: add additional check for minor range overlap Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86/ia32: Fix ia32_restore_sigcontext() AC leak Wen Yang <wen.yang99@xxxxxxxxxx> arm64: cpu_ops: fix a leaked reference by adding missing of_node_put Stanley Chu <stanley.chu@xxxxxxxxxxxx> scsi: ufs: Avoid configuring regulator with undefined voltage range Stanley Chu <stanley.chu@xxxxxxxxxxxx> scsi: ufs: Fix regulator load and icc-level configuration Piotr Figiel <p.figiel@xxxxxxxxxxxxxxxxxxxxxx> brcmfmac: fix race during disconnect when USB completion is in progress Piotr Figiel <p.figiel@xxxxxxxxxxxxxxxxxxxxxx> brcmfmac: convert dev_init_lock mutex to completion Arnd Bergmann <arnd@xxxxxxxx> b43: shut up clang -Wuninitialized variable warning Kangjie Lu <kjlu@xxxxxxx> brcmfmac: fix missing checks for kmemdup Kangjie Lu <kjlu@xxxxxxx> rtlwifi: fix a potential NULL pointer dereference Nathan Chancellor <natechancellor@xxxxxxxxx> iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data Kangjie Lu <kjlu@xxxxxxx> iio: hmc5843: fix potential NULL pointer dereferences Lars-Peter Clausen <lars@xxxxxxxxxx> iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion Kees Cook <keescook@xxxxxxxxxxxx> x86/build: Keep local relocations with ld.lld Wen Yang <wen.yang99@xxxxxxxxxx> cpufreq: pmac32: fix possible object reference leak Wen Yang <wen.yang99@xxxxxxxxxx> cpufreq/pasemi: fix possible object reference leak Wen Yang <wen.yang99@xxxxxxxxxx> cpufreq: ppc_cbe: fix possible object reference leak Arnd Bergmann <arnd@xxxxxxxx> s390: cio: fix cio_irb declaration Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxx> extcon: arizona: Disable mic detect if running when driver is removed Ulf Hansson <ulf.hansson@xxxxxxxxxx> PM / core: Propagate dev->power.wakeup_path when no callbacks Yinbo Zhu <yinbo.zhu@xxxxxxx> mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support Yinbo Zhu <yinbo.zhu@xxxxxxx> mmc: sdhci-of-esdhc: add erratum eSDHC5 support Kangjie Lu <kjlu@xxxxxxx> mmc_spi: add a status check for spi_sync_locked John Garry <john.garry@xxxxxxxxxx> scsi: libsas: Do discovery on empty PHY to update PHY info Guenter Roeck <linux@xxxxxxxxxxxx> hwmon: (f71805f) Use request_muxed_region for Super-IO accesses Guenter Roeck <linux@xxxxxxxxxxxx> hwmon: (pc87427) Use request_muxed_region for Super-IO accesses Guenter Roeck <linux@xxxxxxxxxxxx> hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses Guenter Roeck <linux@xxxxxxxxxxxx> hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses Guenter Roeck <linux@xxxxxxxxxxxx> hwmon: (vt1211) Use request_muxed_region for Super-IO accesses Colin Ian King <colin.king@xxxxxxxxxxxxx> RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure Nicholas Nunley <nicholas.d.nunley@xxxxxxxxx> i40e: don't allow changes to HW VLAN stripping on active port VLANs Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/irq/64: Limit IST stack overflow check to #DB stack Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: core: Don't unbind interfaces following device reset failure Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> sched/core: Handle overflow in cpu_shares_write_u64 Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> sched/core: Check quota and period overflow at usec to nsec conversion Nathan Lynch <nathanl@xxxxxxxxxxxxx> powerpc/numa: improve control of topology updates Dan Carpenter <dan.carpenter@xxxxxxxxxx> media: pvrusb2: Prevent a buffer overflow Shuah Khan <shuah@xxxxxxxxxx> media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() Wenwen Wang <wang6495@xxxxxxx> audit: fix a memory leak bug Akinobu Mita <akinobu.mita@xxxxxxxxx> media: ov2659: make S_FMT succeed even if requested format doesn't match Hans Verkuil <hverkuil@xxxxxxxxx> media: au0828: stop video streaming only when last user stops Janusz Krzysztofik <jmkrzyszt@xxxxxxxxx> media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper Philipp Zabel <p.zabel@xxxxxxxxxxxxxx> media: coda: clear error return value before picture run Nicolas Ferre <nicolas.ferre@xxxxxxxxxxxxx> dmaengine: at_xdmac: remove BUG_ON macro in tasklet Wen Yang <wen.yang99@xxxxxxxxxx> pinctrl: pistachio: fix leaked of_node references Hans de Goede <hdegoede@xxxxxxxxxx> HID: logitech-hidpp: use RAP instead of FAP to get the protocol version Peter Zijlstra <peterz@xxxxxxxxxxxxx> mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions Jiri Kosina <jkosina@xxxxxxx> x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx> smpboot: Place the __percpu annotation correctly Kees Cook <keescook@xxxxxxxxxxxx> x86/build: Move _etext to actual end of .text Arnd Bergmann <arnd@xxxxxxxx> bcache: avoid clang -Wunintialized warning Coly Li <colyli@xxxxxxx> bcache: add failure check to run_cache_set() for journal replay Tang Junhui <tang.junhui.linux@xxxxxxxxx> bcache: fix failure in journal relplay Coly Li <colyli@xxxxxxx> bcache: return error immediately in bch_journal_replay() Kangjie Lu <kjlu@xxxxxxx> net: cw1200: fix a NULL pointer dereference Dan Carpenter <dan.carpenter@xxxxxxxxxx> mwifiex: prevent an array overflow Daniel Baluta <daniel.baluta@xxxxxxx> ASoC: fsl_sai: Update is_slave_mode with correct value Sergey Matyukevich <sergey.matyukevich.os@xxxxxxxxxxxxx> mac80211/cfg80211: update bss channel on channel switch Sugar Zhang <sugar.zhang@xxxxxxxxxxxxxx> dmaengine: pl330: _stop: clear interrupt status Mariusz Bialonczyk <manio@xxxxxxxxxx> w1: fix the resume command API Sven Van Asbroeck <thesven73@xxxxxxxxx> rtc: 88pm860x: prevent use-after-free on device remove Dan Carpenter <dan.carpenter@xxxxxxxxxx> brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() Flavio Suligoi <f.suligoi@xxxxxxx> spi: pxa2xx: fix SCR (divisor) calculation Arnd Bergmann <arnd@xxxxxxxx> ASoC: imx: fix fiq dependencies Bo YU <tsu.yubo@xxxxxxxxx> powerpc/boot: Fix missing check of lseek() return value Raul E Rangel <rrangel@xxxxxxxxxxxx> mmc: core: Verify SD bus width YueHaibing <yuehaibing@xxxxxxxxxx> cxgb4: Fix error path in cxgb4_init_module Ross Lagerwall <ross.lagerwall@xxxxxxxxxx> gfs2: Fix lru_count going negative Arnaldo Carvalho de Melo <acme@xxxxxxxxxx> tools include: Adopt linux/bits.h Arnaldo Carvalho de Melo <acme@xxxxxxxxxx> perf tools: No need to include bitops.h in util.h YueHaibing <yuehaibing@xxxxxxxxxx> at76c50x-usb: Don't register led_trigger if usb_register_driver failed YueHaibing <yuehaibing@xxxxxxxxxx> ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit Alexander Potapenko <glider@xxxxxxxxxx> media: vivid: use vfree() instead of kfree() for dev->bitmap_cap YueHaibing <yuehaibing@xxxxxxxxxx> media: cpia2: Fix use-after-free in cpia2_exit Jiufei Xue <jiufei.xue@xxxxxxxxxxxxxxxxx> fbdev: fix WARNING in __alloc_pages_nodemask bug Mike Kravetz <mike.kravetz@xxxxxxxxxx> hugetlb: use same fault hash key for shared and private mappings Shile Zhang <shile.zhang@xxxxxxxxxxxxxxxxx> fbdev: fix divide error in fb_var_to_videomode Tobin C. Harding <tobin@xxxxxxxxxx> btrfs: sysfs: don't leak memory when failing add fsid Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix race between ranged fsync and writeback of adjacent ranges Andreas Gruenbacher <agruenba@xxxxxxxxxx> gfs2: Fix sign extension bug in gfs2_update_stats Daniel Axtens <dja@xxxxxxxxxx> crypto: vmx - CTR: always increment IV as quadword Martin K. Petersen <martin.petersen@xxxxxxxxxx> Revert "scsi: sd: Keep disk read-only when re-reading partition" Andrea Parri <andrea.parri@xxxxxxxxxxxxxxxxxxxx> bio: fix improper use of smp_mb__before_atomic() Paolo Bonzini <pbonzini@xxxxxxxxxx> KVM: x86: fix return value for reserved EFER Jan Kara <jack@xxxxxxx> ext4: do not delete unlinked inode from orphan list on failed truncate Yifeng Li <tomli@xxxxxxxx> fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough Nikolay Borisov <nborisov@xxxxxxxx> btrfs: Honour FITRIM range constraints during free space trim Nigel Croxon <ncroxon@xxxxxxxxxx> md/raid: raid5 preserve the writeback action after the parity check Song Liu <songliubraving@xxxxxx> Revert "Don't jump to compute_result state from check_result state" Arnaldo Carvalho de Melo <acme@xxxxxxxxxx> perf bench numa: Add define for RUSAGE_THREAD if not present Al Viro <viro@xxxxxxxxxxxxxxxxxx> ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour Andrey Smirnov <andrew.smirnov@xxxxxxxxx> power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG Andrew Jones <drjones@xxxxxxxxxx> KVM: arm/arm64: Ensure vcpu target is unset on reset failure Steffen Klassert <steffen.klassert@xxxxxxxxxxx> xfrm4: Fix uninitialized memory read in _decode_session4 Jeremy Sowden <jeremy@xxxxxxxxxx> vti4: ipip tunnel deregistration fixes. Su Yanjun <suyj.fnst@xxxxxxxxxxxxxx> xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module YueHaibing <yuehaibing@xxxxxxxxxx> xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink Mikulas Patocka <mpatocka@xxxxxxxxxx> dm delay: fix a crash when invalid device is specified James Prestwood <james.prestwood@xxxxxxxxxxxxxxx> PCI: Mark Atheros AR9462 to avoid bus reset Yifeng Li <tomli@xxxxxxxx> fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting Yifeng Li <tomli@xxxxxxxx> fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display Yifeng Li <tomli@xxxxxxxx> fbdev: sm712fb: fix support for 1024x768-16 mode Yifeng Li <tomli@xxxxxxxx> fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM Yifeng Li <tomli@xxxxxxxx> fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA Yifeng Li <tomli@xxxxxxxx> fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F Yifeng Li <tomli@xxxxxxxx> fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75 Yifeng Li <tomli@xxxxxxxx> fbdev: sm712fb: fix brightness control on reboot, don't set SR30 Adrian Hunter <adrian.hunter@xxxxxxxxx> perf intel-pt: Fix sample timestamp wrt non-taken branches Adrian Hunter <adrian.hunter@xxxxxxxxx> perf intel-pt: Fix improved sample timestamp Adrian Hunter <adrian.hunter@xxxxxxxxx> perf intel-pt: Fix instructions sampling rate Dmitry Osipenko <digetx@xxxxxxxxx> memory: tegra: Fix integer overflow on tick value calculation Elazar Leibovich <elazar@xxxxxxxxxxxxxxxxx> tracing: Fix partial reading of trace event's id file Jeff Layton <jlayton@xxxxxxxxxx> ceph: flush dirty inodes before proceeding with remount Dmitry Osipenko <digetx@xxxxxxxxx> iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 Liu Bo <bo.liu@xxxxxxxxxxxxxxxxx> fuse: honor RLIMIT_FSIZE in fuse_file_fallocate Miklos Szeredi <mszeredi@xxxxxxxxxx> fuse: fix writepages on 32bit Dmitry Osipenko <digetx@xxxxxxxxx> clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider ZhangXiaoxu <zhangxiaoxu5@xxxxxxxxxx> NFS4: Fix v4.0 client state corruption when mount Janusz Krzysztofik <jmkrzyszt@xxxxxxxxx> media: ov6650: Fix sensor possibly not detected on probe Christoph Probst <kernel@xxxxxxxxx> cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() Phong Tran <tranmanphong@xxxxxxxxx> of: fix clang -Wunsequenced for be32_to_cpu() Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx> intel_th: msu: Fix single mode with IOMMU Yufen Yu <yuyufen@xxxxxxxxxx> md: add mddev->pers to avoid potential NULL pointer dereference Tingwei Zhang <tingwei@xxxxxxxxxxxxxx> stm class: Fix channel free in stm output free path Junwei Hu <hujunwei4@xxxxxxxxxx> tipc: fix modprobe tipc failed after switch order of device registration Junwei Hu <hujunwei4@xxxxxxxxxx> tipc: switch order of device registration to fix a crash YueHaibing <yuehaibing@xxxxxxxxxx> ppp: deflate: Fix possible crash in deflate_init Yunjian Wang <wangyunjian@xxxxxxxxxx> net/mlx4_core: Change the error print to info print Eric Dumazet <edumazet@xxxxxxxxxx> net: avoid weird emergency message Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes Michał Wadowski <wadosm@xxxxxxxxx> ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug Sriram Rajagopalan <sriramr@xxxxxxxxxx> ext4: zero out the unused memory region in the extent tree block Jiufei Xue <jiufei.xue@xxxxxxxxxxxxxxxxx> fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount Tejun Heo <tj@xxxxxxxxxx> writeback: synchronize sync(2) against cgroup writeback membership switches Eric Biggers <ebiggers@xxxxxxxxxx> crypto: arm/aes-neonbs - don't access already-freed walk.iv Eric Biggers <ebiggers@xxxxxxxxxx> crypto: salsa20 - don't access already-freed walk.iv Eric Biggers <ebiggers@xxxxxxxxxx> crypto: chacha20poly1305 - set cra_name correctly Eric Biggers <ebiggers@xxxxxxxxxx> crypto: gcm - fix incompatibility between "gcm" and "gcm_base" Wei Yongjun <weiyongjun1@xxxxxxxxxx> crypto: gcm - Fix error return code in crypto_gcm_create_common() Kamlakant Patel <kamlakantp@xxxxxxxxxxx> ipmi:ssif: compare block number correctly for multi-part return messages Coly Li <colyli@xxxxxxx> bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() Liang Chen <liangchen.linux@xxxxxxxxx> bcache: fix a race between cache register and cacheset unregister Filipe Manana <fdmanana@xxxxxxxx> Btrfs: do not start a transaction at iterate_extent_inodes() Debabrata Banerjee <dbanerje@xxxxxxxxxx> ext4: fix ext4_show_options for file systems w/o journal Kirill Tkhai <ktkhai@xxxxxxxxxxxxx> ext4: actually request zeroing of inode table after grow Sergei Trofimovich <slyfox@xxxxxxxxxx> tty/vt: fix write/write race in ioctl(KDSKBSENT) handler Steve Twiss <stwiss.opensource@xxxxxxxxxxx> mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L Shuning Zhang <sunny.s.zhang@xxxxxxxxxx> ocfs2: fix ocfs2 read inode data panic in ocfs2_iget Jiri Kosina <jkosina@xxxxxxx> mm/mincore.c: make mincore() more conservative Curtis Malainey <cujomalainey@xxxxxxxxxxxx> ASoC: RT5677-SPI: Disable 16Bit SPI Transfers Jon Hunter <jonathanh@xxxxxxxxxx> ASoC: max98090: Fix restore of DAPM Muxes Kailang Yang <kailang@xxxxxxxxxxx> ALSA: hda/realtek - EAPD turn on later Hui Wang <hui.wang@xxxxxxxxxxxxx> ALSA: hda/hdmi - Consider eld_valid when reporting jack event Wenwen Wang <wang6495@xxxxxxx> ALSA: usb-audio: Fix a memory leak bug Eric Biggers <ebiggers@xxxxxxxxxx> crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() Eric Biggers <ebiggers@xxxxxxxxxx> crypto: crct10dif-generic - fix use via crypto_shash_digest() Daniel Axtens <dja@xxxxxxxxxx> crypto: vmx - fix copy-paste error in CTR mode Wen Yang <wen.yang99@xxxxxxxxxx> ARM: exynos: Fix a leaked reference by adding missing of_node_put Andy Lutomirski <luto@xxxxxxxxxx> x86/speculation/mds: Improve CPU buffer clear documentation Andy Lutomirski <luto@xxxxxxxxxx> x86/speculation/mds: Revert CPU buffer clear on double fault exit ------------- Diffstat: Documentation/x86/mds.rst | 44 +-- Makefile | 4 +- arch/arm/crypto/aesbs-glue.c | 4 + arch/arm/kvm/arm.c | 11 +- arch/arm/mach-exynos/firmware.c | 1 + arch/arm/mach-exynos/suspend.c | 2 + arch/arm64/kernel/cpu_ops.c | 1 + arch/mips/pistachio/Platform | 1 + arch/powerpc/boot/addnote.c | 6 +- arch/powerpc/mm/numa.c | 18 +- arch/sparc/mm/ultra.S | 4 +- arch/x86/Makefile | 2 +- arch/x86/crypto/crct10dif-pclmul_glue.c | 13 +- arch/x86/ia32/ia32_signal.c | 29 +- arch/x86/kernel/irq_64.c | 19 +- arch/x86/kernel/traps.c | 8 - arch/x86/kvm/x86.c | 31 +- arch/x86/mm/fault.c | 2 - crypto/chacha20poly1305.c | 4 +- crypto/crct10dif_generic.c | 11 +- crypto/gcm.c | 36 +- crypto/salsa20_generic.c | 2 +- drivers/android/binder.c | 36 +- drivers/base/power/main.c | 4 + drivers/char/ipmi/ipmi_ssif.c | 6 +- drivers/char/virtio_console.c | 3 +- drivers/clk/tegra/clk-pll.c | 4 +- drivers/cpufreq/pasemi-cpufreq.c | 1 + drivers/cpufreq/pmac32-cpufreq.c | 2 + drivers/cpufreq/ppc_cbe_cpufreq.c | 1 + drivers/crypto/vmx/aesp8-ppc.pl | 6 +- drivers/crypto/vmx/ghash.c | 218 +++++-------- drivers/dma/at_xdmac.c | 6 +- drivers/dma/pl330.c | 10 +- drivers/extcon/extcon-arizona.c | 10 + drivers/gpu/drm/gma500/cdv_intel_lvds.c | 3 + drivers/gpu/drm/gma500/intel_bios.c | 3 + drivers/gpu/drm/gma500/psb_drv.h | 1 + drivers/gpu/drm/nouveau/include/nvkm/subdev/i2c.h | 2 + drivers/gpu/drm/nouveau/nvkm/subdev/i2c/aux.c | 26 +- drivers/gpu/drm/nouveau/nvkm/subdev/i2c/aux.h | 2 + drivers/gpu/drm/nouveau/nvkm/subdev/i2c/base.c | 15 + drivers/gpu/drm/nouveau/nvkm/subdev/i2c/bus.c | 21 +- drivers/gpu/drm/nouveau/nvkm/subdev/i2c/bus.h | 1 + drivers/hid/hid-core.c | 36 +- drivers/hid/hid-logitech-hidpp.c | 17 +- drivers/hwmon/f71805f.c | 15 +- drivers/hwmon/pc87427.c | 14 +- drivers/hwmon/smsc47b397.c | 13 +- drivers/hwmon/smsc47m1.c | 28 +- drivers/hwmon/vt1211.c | 15 +- drivers/hwtracing/intel_th/msu.c | 35 +- drivers/hwtracing/stm/core.c | 2 +- drivers/iio/adc/ad_sigma_delta.c | 16 +- drivers/iio/common/ssp_sensors/ssp_iio.c | 2 +- drivers/infiniband/hw/cxgb4/cm.c | 2 + drivers/iommu/tegra-smmu.c | 25 +- drivers/md/bcache/alloc.c | 5 +- drivers/md/bcache/journal.c | 37 ++- drivers/md/bcache/super.c | 19 +- drivers/md/dm-delay.c | 3 +- drivers/md/md.c | 6 +- drivers/md/raid5.c | 29 +- drivers/media/dvb-frontends/m88ds3103.c | 9 +- drivers/media/i2c/ov2659.c | 6 +- drivers/media/i2c/soc_camera/ov6650.c | 27 +- drivers/media/pci/saa7146/hexium_gemini.c | 5 +- drivers/media/pci/saa7146/hexium_orion.c | 5 +- drivers/media/platform/coda/coda-bit.c | 3 + drivers/media/platform/vivid/vivid-vid-cap.c | 2 +- drivers/media/radio/wl128x/fmdrv_common.c | 7 +- drivers/media/usb/au0828/au0828-video.c | 16 +- drivers/media/usb/cpia2/cpia2_v4l.c | 3 +- drivers/media/usb/go7007/go7007-fw.c | 4 +- drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 2 + drivers/media/usb/pvrusb2/pvrusb2-hdw.h | 1 + drivers/media/usb/siano/smsusb.c | 33 +- drivers/media/usb/uvc/uvc_driver.c | 2 +- drivers/memory/tegra/mc.c | 2 +- drivers/misc/genwqe/card_dev.c | 2 + drivers/misc/genwqe/card_utils.c | 4 + drivers/mmc/core/sd.c | 8 + drivers/mmc/host/mmc_spi.c | 4 + drivers/mmc/host/sdhci-of-esdhc.c | 5 + drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 18 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2 + drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +- drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 15 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 8 + drivers/net/ethernet/marvell/mvpp2.c | 10 +- drivers/net/ethernet/mellanox/mlx4/en_ethtool.c | 4 +- drivers/net/ethernet/mellanox/mlx4/mcg.c | 2 +- drivers/net/ethernet/mellanox/mlx4/port.c | 5 - drivers/net/ethernet/stmicro/stmmac/stmmac_mdio.c | 3 +- drivers/net/ppp/ppp_deflate.c | 20 +- drivers/net/usb/cdc_ncm.c | 4 +- drivers/net/usb/usbnet.c | 6 + drivers/net/wireless/at76c50x-usb.c | 4 +- drivers/net/wireless/b43/phy_lp.c | 6 +- drivers/net/wireless/brcm80211/brcmfmac/bus.h | 4 +- drivers/net/wireless/brcm80211/brcmfmac/cfg80211.c | 23 +- drivers/net/wireless/brcm80211/brcmfmac/core.c | 45 ++- drivers/net/wireless/brcm80211/brcmfmac/fweh.c | 57 +--- drivers/net/wireless/brcm80211/brcmfmac/fweh.h | 82 ++++- drivers/net/wireless/brcm80211/brcmfmac/msgbuf.c | 42 ++- drivers/net/wireless/brcm80211/brcmfmac/p2p.c | 10 + drivers/net/wireless/brcm80211/brcmfmac/sdio.c | 32 +- drivers/net/wireless/brcm80211/brcmfmac/usb.c | 29 +- drivers/net/wireless/brcm80211/brcmfmac/vendor.c | 5 +- drivers/net/wireless/cw1200/main.c | 5 + drivers/net/wireless/mwifiex/cfp.c | 3 + drivers/net/wireless/realtek/rtlwifi/base.c | 5 + drivers/parisc/ccio-dma.c | 4 +- drivers/parisc/sba_iommu.c | 3 +- drivers/pci/quirks.c | 1 + drivers/pinctrl/pinctrl-pistachio.c | 2 + drivers/power/power_supply_sysfs.c | 6 - drivers/rtc/rtc-88pm860x.c | 2 +- drivers/s390/cio/cio.h | 2 +- drivers/s390/scsi/zfcp_ext.h | 1 + drivers/s390/scsi/zfcp_scsi.c | 9 + drivers/s390/scsi/zfcp_sysfs.c | 55 +++- drivers/s390/scsi/zfcp_unit.c | 8 +- drivers/scsi/libsas/sas_expander.c | 5 + drivers/scsi/lpfc/lpfc_hbadisc.c | 11 +- drivers/scsi/qla4xxx/ql4_os.c | 2 +- drivers/scsi/sd.c | 3 +- drivers/scsi/ufs/ufshcd.c | 28 +- drivers/spi/spi-pxa2xx.c | 8 +- drivers/spi/spi-rspi.c | 9 +- drivers/spi/spi-tegra114.c | 32 +- drivers/spi/spi-topcliff-pch.c | 15 +- drivers/spi/spi.c | 2 + drivers/ssb/bridge_pcmcia_80211.c | 9 +- drivers/staging/iio/magnetometer/hmc5843_i2c.c | 7 +- drivers/staging/iio/magnetometer/hmc5843_spi.c | 7 +- drivers/tty/ipwireless/main.c | 8 + drivers/tty/serial/max310x.c | 2 +- drivers/tty/serial/msm_serial.c | 5 +- drivers/tty/vt/keyboard.c | 33 +- drivers/usb/core/config.c | 4 +- drivers/usb/core/hcd.c | 3 + drivers/usb/core/hub.c | 5 +- drivers/usb/core/quirks.c | 3 + drivers/usb/host/xhci.c | 24 +- drivers/usb/misc/rio500.c | 41 ++- drivers/usb/misc/sisusbvga/sisusb.c | 15 +- drivers/video/fbdev/core/fbcmap.c | 2 + drivers/video/fbdev/core/modedb.c | 3 + drivers/video/fbdev/sm712.h | 12 +- drivers/video/fbdev/sm712fb.c | 243 +++++++++++--- drivers/w1/w1_io.c | 3 +- drivers/xen/xen-pciback/pciback_ops.c | 2 - drivers/xen/xenbus/xenbus_dev_frontend.c | 2 +- fs/btrfs/backref.c | 18 +- fs/btrfs/extent-tree.c | 25 +- fs/btrfs/file.c | 12 + fs/btrfs/sysfs.c | 7 +- fs/btrfs/tree-log.c | 8 +- fs/ceph/super.c | 7 + fs/char_dev.c | 6 + fs/cifs/file.c | 4 +- fs/cifs/smb2ops.c | 14 +- fs/ext4/extents.c | 17 +- fs/ext4/inode.c | 2 +- fs/ext4/ioctl.c | 2 +- fs/ext4/super.c | 2 +- fs/fs-writeback.c | 51 ++- fs/fuse/file.c | 13 +- fs/gfs2/glock.c | 22 +- fs/gfs2/lock_dlm.c | 9 +- fs/hugetlbfs/inode.c | 8 +- fs/nfs/nfs4state.c | 4 + fs/ocfs2/export.c | 30 +- fs/open.c | 18 + fs/read_write.c | 5 +- fs/ufs/util.h | 2 +- fs/userfaultfd.c | 41 ++- include/linux/backing-dev-defs.h | 1 + include/linux/bio.h | 2 +- include/linux/bitops.h | 16 +- include/linux/fs.h | 4 + include/linux/hid.h | 1 + include/linux/hugetlb.h | 4 +- include/linux/iio/adc/ad_sigma_delta.h | 1 + include/linux/list_lru.h | 1 + include/linux/mfd/da9063/registers.h | 6 +- include/linux/of.h | 4 +- include/linux/rcupdate.h | 6 +- include/linux/sched.h | 7 +- include/linux/skbuff.h | 30 ++ include/linux/smpboot.h | 2 +- include/linux/usb/gadget.h | 4 +- include/uapi/linux/fuse.h | 2 + include/uapi/linux/tipc_config.h | 10 +- kernel/auditfilter.c | 12 +- kernel/rcu/rcutorture.c | 5 + kernel/sched/core.c | 9 +- kernel/signal.c | 2 + kernel/trace/trace_events.c | 3 - lib/strncpy_from_user.c | 5 +- lib/strnlen_user.c | 4 +- mm/backing-dev.c | 1 + mm/hugetlb.c | 19 +- mm/list_lru.c | 8 +- mm/mincore.c | 23 +- net/core/dev.c | 4 +- net/core/ethtool.c | 5 +- net/core/neighbour.c | 9 +- net/core/pktgen.c | 11 + net/ipv4/ip_vti.c | 5 +- net/ipv4/xfrm4_policy.c | 24 +- net/ipv6/raw.c | 2 + net/ipv6/xfrm6_tunnel.c | 4 + net/llc/llc_output.c | 2 + net/mac80211/mlme.c | 3 - net/rds/ib_rdma.c | 10 +- net/sched/sch_tbf.c | 10 - net/tipc/core.c | 32 +- net/tipc/subscr.c | 14 +- net/tipc/subscr.h | 5 +- net/wireless/nl80211.c | 5 + net/xfrm/xfrm_user.c | 2 +- scripts/coccinelle/api/stream_open.cocci | 363 +++++++++++++++++++++ sound/pci/hda/patch_hdmi.c | 6 +- sound/pci/hda/patch_realtek.c | 7 +- sound/soc/codecs/max98090.c | 12 +- sound/soc/codecs/rt5677-spi.c | 35 +- sound/soc/davinci/davinci-mcasp.c | 2 + sound/soc/fsl/Kconfig | 9 +- sound/soc/fsl/eukrea-tlv320.c | 4 +- sound/soc/fsl/fsl_sai.c | 2 + sound/soc/fsl/fsl_utils.c | 1 + sound/usb/mixer.c | 2 + tools/include/linux/bitops.h | 7 +- tools/include/linux/bits.h | 26 ++ tools/perf/bench/numa.c | 4 + .../perf/util/intel-pt-decoder/intel-pt-decoder.c | 31 +- tools/perf/util/string.c | 1 + tools/perf/util/util.h | 1 - 240 files changed, 2424 insertions(+), 950 deletions(-)
