This is the start of the stable review cycle for the 4.9.291 release. There are 206 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 27 Nov 2021 12:56:08 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.291-rc2.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.9.291-rc2 Nadav Amit <namit@xxxxxxxxxx> hugetlbfs: flush TLBs correctly after huge_pmd_unshare Mike Kravetz <mike.kravetz@xxxxxxxxxx> hugetlb: take PMD sharing into account when flushing tlb/caches Dmitry Osipenko <digetx@xxxxxxxxx> soc/tegra: pmc: Fix imbalanced clock disabling in error code path Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx> usb: max-3421: Use driver data instead of maintaining a list of bound devices Takashi Iwai <tiwai@xxxxxxx> ASoC: DAPM: Cover regression by kctl change notification fix Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Don't always reallocate the fragmentation skb head Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Reserve needed_*room for fragments Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Consider fragmentation for needed_headroom Linus Lüssing <linus.luessing@xxxxxxxxx> batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh Linus Lüssing <linus.luessing@xxxxxxxxx> batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN Linus Lüssing <linus.luessing@xxxxxxxxx> batman-adv: Fix own OGM check in aggregated OGMs Sven Eckelmann <sven@xxxxxxxxxxxxx> batman-adv: Keep fragments equally sized hongao <hongao@xxxxxxxxxxxxx> drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors Johan Hovold <johan@xxxxxxxxxx> drm/udl: fix control-message timeout Nguyen Dinh Phi <phind.uet@xxxxxxxxx> cfg80211: call cfg80211_stop_ap when switch from P2P_GO type Sven Schnelle <svens@xxxxxxxxxxxxxx> parisc/sticon: fix reverse colors Nikolay Borisov <nborisov@xxxxxxxx> btrfs: fix memory ordering between normal and ordered work functions Rustam Kovhaev <rkovhaev@xxxxxxxxx> mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag Nathan Chancellor <nathan@xxxxxxxxxx> hexagon: export raw I/O routines for modules Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> tun: fix bonding active backup with arp monitoring Alexander Antonov <alexander.antonov@xxxxxxxxxxxxxxx> perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server Alexander Antonov <alexander.antonov@xxxxxxxxxxxxxxx> perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server Lin Ma <linma@xxxxxxxxxx> NFC: reorder the logic in nfc_{un,}register_device Lin Ma <linma@xxxxxxxxxx> NFC: reorganize the functions in nci_request Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' Randy Dunlap <rdunlap@xxxxxxxxxxxxx> mips: bcm63xx: add support for clk_get_parent() Surabhi Boob <surabhi.boob@xxxxxxxxx> iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset Pavel Skripkin <paskripkin@xxxxxxxxx> net: bnx2x: fix variable dereferenced before check Vincent Donnefort <vincent.donnefort@xxxxxxx> sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() Randy Dunlap <rdunlap@xxxxxxxxxxxxx> mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set Randy Dunlap <rdunlap@xxxxxxxxxxxxx> sh: define __BIG_ENDIAN for math-emu Randy Dunlap <rdunlap@xxxxxxxxxxxxx> sh: fix kconfig unmet dependency warning for FRAME_POINTER Lu Wei <luwei32@xxxxxxxxxx> maple: fix wrong return value of maple_bus_init(). Nick Desaulniers <ndesaulniers@xxxxxxxxxx> sh: check return code of request_irq Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/dcr: Use cmplwi instead of 3-argument cmpli Chengfeng Ye <cyeaa@xxxxxxxxxxxxxx> ALSA: gus: fix null pointer dereference on pointer block Anatolij Gustschin <agust@xxxxxxx> powerpc/5200: dts: fix memory node unit name Mike Christie <michael.christie@xxxxxxxxxx> scsi: target: Fix alua_tg_pt_gps_count tracking Mike Christie <michael.christie@xxxxxxxxxx> scsi: target: Fix ordered tag handling Bart Van Assche <bvanassche@xxxxxxx> MIPS: sni: Fix the build Guanghui Feng <guanghuifeng@xxxxxxxxxxxxxxxxx> tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc Yang Yingliang <yangyingliang@xxxxxxxxxx> usb: host: ohci-tmio: check return value after calling platform_get_resource() Roger Quadros <rogerq@xxxxxxxxxx> ARM: dts: omap: fix gpmc,mux-add-data type Guo Zhi <qtxuning1999@xxxxxxxxxxx> scsi: advansys: Fix kernel pointer leak Yang Yingliang <yangyingliang@xxxxxxxxxx> usb: musb: tusb6010: check return value after calling platform_get_resource() James Smart <jsmart2021@xxxxxxxxx> scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() Thomas Gleixner <tglx@xxxxxxxxxxxxx> PCI/MSI: Destroy sysfs before freeing entries Sven Schnelle <svens@xxxxxxxxxxxxxx> parisc/entry: fix trace test in syscall exit path Corentin Labbe <clabbe.montjoie@xxxxxxxxx> net: mdio-mux: fix unbalanced put_device Pali Rohár <pali@xxxxxxxxxx> PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros Michal Hocko <mhocko@xxxxxxxx> mm, oom: do not trigger out_of_memory from the #PF Vasily Averin <vvs@xxxxxxxxxxxxx> mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks Naveen N. Rao <naveen.n.rao@xxxxxxxxxxxxxxxxxx> powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 Naveen N. Rao <naveen.n.rao@xxxxxxxxxxxxxxxxxx> powerpc/bpf: Validate branch ranges Arnd Bergmann <arnd@xxxxxxxx> ARM: 9156/1: drop cc-option fallbacks for architecture selection Johan Hovold <johan@xxxxxxxxxx> USB: chipidea: fix interrupt deadlock Eiichi Tsukata <eiichi.tsukata@xxxxxxxxxxx> vsock: prevent unnecessary refcnt inc for nonblocking connect Chengfeng Ye <cyeaa@xxxxxxxxxxxxxx> nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails Eric Dumazet <edumazet@xxxxxxxxxx> llc: fix out-of-bound array index in llc_sk_dev_hash() Miaohe Lin <linmiaohe@xxxxxxxxxx> mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() Huang Guobin <huangguobin4@xxxxxxxxxx> bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed Hans de Goede <hdegoede@xxxxxxxxxx> ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses Maxim Kiselev <bigunclemax@xxxxxxxxx> net: davinci_emac: Fix interrupt pacing disable YueHaibing <yuehaibing@xxxxxxxxxx> xen-pciback: Fix return in pm_ctrl_init() Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()' Quinn Tran <qutran@xxxxxxxxxxx> scsi: qla2xxx: Turn off target reset during issue_lip Ahmad Fatoum <a.fatoum@xxxxxxxxxxxxxx> watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT Randy Dunlap <rdunlap@xxxxxxxxxxxxx> m68k: set a default value for MEMORY_RESERVE Lars-Peter Clausen <lars@xxxxxxxxxx> dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result` Florian Westphal <fw@xxxxxxxxx> netfilter: nfnetlink_queue: fix OOB when mac header was cleared Geert Uytterhoeven <geert@xxxxxxxxxxxxxx> auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string Claudiu Beznea <claudiu.beznea@xxxxxxxxxxxxx> dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro Evgeny Novikov <novikov@xxxxxxxxx> mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() Jia-Ju Bai <baijiaju1990@xxxxxxxxx> fs: orangefs: fix error return code of orangefs_revalidate_lookup() Marek Behún <kabel@xxxxxxxxxx> PCI: aardvark: Don't spam about PIO Response Status Alex Xu (Hello71) <alex_y_xu@xxxxxxxx> drm/plane-helper: fix uninitialized variable reference Baptiste Lepers <baptiste.lepers@xxxxxxxxx> pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds Hans de Goede <hdegoede@xxxxxxxxxx> power: supply: bq27xxx: Fix kernel crash on IRQ handler register error Anssi Hannula <anssi.hannula@xxxxxxxxxx> serial: xilinx_uartps: Fix race condition causing stuck TX Leon Romanovsky <leonro@xxxxxxxxxx> RDMA/mlx4: Return missed an error if device doesn't support steering Dan Carpenter <dan.carpenter@xxxxxxxxxx> scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() Jakob Hauser <jahau@xxxxxxxxxxxxxx> power: supply: rt5033_battery: Change voltage values to µV Dan Carpenter <dan.carpenter@xxxxxxxxxx> usb: gadget: hid: fix error code in do_config() Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> serial: 8250_dw: Drop wrong use of ACPI_PTR() Christophe Leroy <christophe.leroy@xxxxxxxxxx> video: fbdev: chipsfb: use memset_io() instead of memset() Dongliang Mu <mudongliangabcd@xxxxxxxxx> memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> soc/tegra: Fix an error handling path in tegra_powergate_power_up() Andreas Kemnade <andreas@xxxxxxxxxxxx> arm: dts: omap3-gta04a4: accelerometer irq fix Dongliang Mu <mudongliangabcd@xxxxxxxxx> JFS: fix memleak in jfs_mount Jackie Liu <liuyun01@xxxxxxxxxx> MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT Tong Zhang <ztong0001@xxxxxxxxx> scsi: dc395: Fix error case unwinding Jackie Liu <liuyun01@xxxxxxxxxx> ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() Junji Wei <weijunji@xxxxxxxxxxxxx> RDMA/rxe: Fix wrong port_cap_flags Daniel Jordan <daniel.m.jordan@xxxxxxxxxx> crypto: pcrypt - Delay write to padata->info Wang Hai <wanghai38@xxxxxxxxxx> libertas: Fix possible memory leak in probe and disconnect Wang Hai <wanghai38@xxxxxxxxxx> libertas_tf: Fix possible memory leak in probe and disconnect Tiezhu Yang <yangtiezhu@xxxxxxxxxxx> samples/kretprobes: Fix return value if register_kretprobe() failed Mark Rutland <mark.rutland@xxxxxxx> irq: mips: avoid nested irq_enter() David Hildenbrand <david@xxxxxxxxxx> s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap() Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi Stefan Agner <stefan@xxxxxxxx> phy: micrel: ksz8041nl: do not use power down mode Jonas Dreßler <verdre@xxxxxxx> mwifiex: Send DELBA requests according to spec Nathan Chancellor <nathan@xxxxxxxxxx> platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> mmc: mxs-mmc: disable regulator on error and in the remove function Jakub Kicinski <kuba@xxxxxxxxxx> net: stream: don't purge sk_error_queue in sk_stream_kill_queues() Dan Carpenter <dan.carpenter@xxxxxxxxxx> drm/msm: uninitialized variable in msm_gem_import() Sven Eckelmann <seckelmann@xxxxxxxxx> ath10k: fix max antenna gain unit Yang Yingliang <yangyingliang@xxxxxxxxxx> hwmon: Fix possible memleak in __hwmon_device_register() Dan Carpenter <dan.carpenter@xxxxxxxxxx> memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() Arnd Bergmann <arnd@xxxxxxxx> memstick: avoid out-of-range warning Dan Carpenter <dan.carpenter@xxxxxxxxxx> b43: fix a lower bounds test Dan Carpenter <dan.carpenter@xxxxxxxxxx> b43legacy: fix a lower bounds test Giovanni Cabiddu <giovanni.cabiddu@xxxxxxxxx> crypto: qat - disregard spurious PFVF interrupts Giovanni Cabiddu <giovanni.cabiddu@xxxxxxxxx> crypto: qat - detect PFVF collision after ACK Linus Lüssing <ll@xxxxxxxxxxxxxxxxxx> ath9k: Fix potential interrupt storm on queue reset Anel Orazgaliyeva <anelkz@xxxxxxxxx> cpuidle: Fix kobject memory leaks in error paths Kees Cook <keescook@xxxxxxxxxxxx> media: si470x: Avoid card name truncation Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()' Pavel Skripkin <paskripkin@xxxxxxxxx> media: dvb-usb: fix ununit-value in az6027_rc_query Waiman Long <longman@xxxxxxxxxx> cgroup: Make rebind_subsystems() disable v2 controllers all at once Sven Schnelle <svens@xxxxxxxxxxxxxx> parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling Sven Schnelle <svens@xxxxxxxxxxxxxx> parisc: fix warning in flush_tlb_all Yang Yingliang <yangyingliang@xxxxxxxxxx> spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() Arnd Bergmann <arnd@xxxxxxxx> ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 Masami Hiramatsu <mhiramat@xxxxxxxxxx> ARM: clang: Do not rely on lr register for stacktrace Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> smackfs: use __GFP_NOFAIL for smk_cipso_doi() Johannes Berg <johannes.berg@xxxxxxxxx> iwlwifi: mvm: disable RX-diversity in powersave Ye Bin <yebin10@xxxxxxxxxx> PM: hibernate: Get block device exclusively in swsusp_check() Zheyu Ma <zheyuma97@xxxxxxxxx> mwl8k: Fix use-after-free in mwl8k_fw_state_machine() Kalesh Singh <kaleshsingh@xxxxxxxxxx> tracing/cfi: Fix cmp_entries_* functions signature mismatch Lasse Collin <lasse.collin@xxxxxxxxxxx> lib/xz: Validate the value before assigning it to an enum variable Lasse Collin <lasse.collin@xxxxxxxxxxx> lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression Zheyu Ma <zheyuma97@xxxxxxxxx> memstick: r592: Fix a UAF bug when removing the driver André Almeida <andrealmeid@xxxxxxxxxxxxx> ACPI: battery: Accept charges over the design capacity as full Tuo Li <islituo@xxxxxxxxx> ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> tracefs: Have tracefs directories not set OTH permission bits by default Anant Thazhemadam <anant.thazhemadam@xxxxxxxxx> media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> ACPICA: Avoid evaluating methods too early during system resume Randy Dunlap <rdunlap@xxxxxxxxxxxxx> ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK Rajat Asthana <rajatasthana4@xxxxxxxxx> media: mceusb: return without resubmitting URB in case of -EPROTO error. Tuo Li <islituo@xxxxxxxxx> media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() Ricardo Ribalda <ribalda@xxxxxxxxxxxx> media: uvcvideo: Set capability in s_param Zheyu Ma <zheyuma97@xxxxxxxxx> media: netup_unidvb: handle interrupt properly according to the firmware Dirk Bender <d.bender@xxxxxxxxx> media: mt9p031: Fix corrupted frame after restarting stream Peter Zijlstra <peterz@xxxxxxxxxxxxx> x86: Increase exception stack sizes Pawan Gupta <pawan.kumar.gupta@xxxxxxxxxxxxxxx> smackfs: Fix use-after-free in netlbl_catmap_walk() Peter Zijlstra <peterz@xxxxxxxxxxxxx> locking/lockdep: Avoid RCU-induced noinstr fail Aleksander Jan Bajkowski <olek2@xxxxx> MIPS: lantiq: dma: reset correct number of channel Aleksander Jan Bajkowski <olek2@xxxxx> MIPS: lantiq: dma: add small delay after reset Barnabás Pőcze <pobrn@xxxxxxxxxxxxxx> platform/x86: wmi: do not fail if disabling fails Wang ShaoBo <bobo.shaobowang@xxxxxxxxxx> Bluetooth: fix use-after-free error in lock_sock_nested() Takashi Iwai <tiwai@xxxxxxx> Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() Johan Hovold <johan@xxxxxxxxxx> USB: iowarrior: fix control-message timeouts Wang Hai <wanghai38@xxxxxxxxxx> USB: serial: keyspan: fix memleak on probe errors Pekka Korpinen <pekka.korpinen@xxxxxx> iio: dac: ad5446: Fix ad5622_write() return value Zhang Yi <yi.zhang@xxxxxxxxxx> quota: correct error number in free_dqentry() Zhang Yi <yi.zhang@xxxxxxxxxx> quota: check block number when reading the block in quota file Marek Behún <kabel@xxxxxxxxxx> PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG Pavel Skripkin <paskripkin@xxxxxxxxx> ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume Takashi Iwai <tiwai@xxxxxxx> ALSA: mixer: oss: Fix racy access to slots Pali Rohár <pali@xxxxxxxxxx> serial: core: Fix initializing and restoring termios speed Xiaoming Ni <nixiaoming@xxxxxxxxxx> powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found Henrik Grimler <henrik@xxxxxxxxxx> power: supply: max17042_battery: use VFSOC for capacity when no rsns Sebastian Krzyszkowiak <sebastian.krzyszkowiak@xxxxxxx> power: supply: max17042_battery: Prevent int underflow in set_soc_threshold Eric W. Biederman <ebiederm@xxxxxxxxxxxx> signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT Eric W. Biederman <ebiederm@xxxxxxxxxxxx> signal: Remove the bogus sigkill_pending in ptrace_stop Alok Prasad <palok@xxxxxxxxxxx> RDMA/qedr: Fix NULL deref for query_qp on the GSI QP Benjamin Li <benl@xxxxxxxxxxxx> wcn36xx: handle connection loss indication Jonas Dreßler <verdre@xxxxxxx> mwifiex: Read a PCI register after writing the TX ring write pointer Loic Poulain <loic.poulain@xxxxxxxxxx> wcn36xx: Fix HT40 capability for 2Ghz band Austin Kim <austin.kim@xxxxxxx> evm: mark evm_fixmode as __ro_after_init Johan Hovold <johan@xxxxxxxxxx> rtl8187: fix control-message timeouts Ingmar Klein <ingmar_klein@xxxxxx> PCI: Mark Atheros QCA6174 to avoid bus reset Johan Hovold <johan@xxxxxxxxxx> ath6kl: fix control-message timeout Johan Hovold <johan@xxxxxxxxxx> ath6kl: fix division by zero in send path Johan Hovold <johan@xxxxxxxxxx> mwifiex: fix division by zero in fw download path Eric Badger <ebadger@xxxxxxxxxxxxxxx> EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx> regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx> regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled Zev Weiss <zev@xxxxxxxxxxxxxxxxx> hwmon: (pmbus/lm25066) Add offset coefficients Filipe Manana <fdmanana@xxxxxxxx> btrfs: fix lost error handling when replaying directory deletes Dongli Zhang <dongli.zhang@xxxxxxxxxx> vmxnet3: do not stop tx queues after netif_device_detach() Walter Stoll <walter.stoll@xxxxxxxxxx> watchdog: Fix OMAP watchdog early handling Thomas Perrot <thomas.perrot@xxxxxxxxxxx> spi: spl022: fix Microwire full duplex mode Dongli Zhang <dongli.zhang@xxxxxxxxxx> xen/netfront: stop tx queues during live migration Lorenz Bauer <lmb@xxxxxxxxxxxxxx> bpf: Prevent increasing bpf_jit_limit above max Randy Dunlap <rdunlap@xxxxxxxxxxxxx> mmc: winbond: don't build on M68K Arnd Bergmann <arnd@xxxxxxxx> hyperv/vmbus: include linux/bitops.h Erik Ekman <erik@xxxxxxx> sfc: Don't use netif_info before net_device setup Sean Christopherson <seanjc@xxxxxxxxxx> x86/irq: Ensure PI wakeup handler is unregistered before module unload Takashi Iwai <tiwai@xxxxxxx> ALSA: timer: Unconditionally unlink slave instances, too Wang Wensheng <wangwensheng4@xxxxxxxxxx> ALSA: timer: Fix use-after-free problem Austin Kim <austin.kim@xxxxxxx> ALSA: synth: missing check for possible NULL after the call to kstrdup Johan Hovold <johan@xxxxxxxxxx> ALSA: line6: fix control and interrupt message timeouts Johan Hovold <johan@xxxxxxxxxx> ALSA: 6fire: fix control and bulk message timeouts Johan Hovold <johan@xxxxxxxxxx> ALSA: ua101: fix division by zero at probe Sean Young <sean@xxxxxxxx> media: ite-cir: IR receiver stop working after receive overflow Helge Deller <deller@xxxxxx> parisc: Fix ptrace check on syscall return Christian Löhle <CLoehle@xxxxxxxxxxxxxx> mmc: dw_mmc: Dont wait for DRTO on Write RSP error Jan Kara <jack@xxxxxxx> ocfs2: fix data corruption on truncate Damien Le Moal <damien.lemoal@xxxxxxxxxxxxxxxxxx> libata: fix read log timeout value Takashi Iwai <tiwai@xxxxxxx> Input: i8042 - Add quirk for Fujitsu Lifebook T725 Phoenix Huang <phoenix@xxxxxxxxxx> Input: elantench - fix misreporting trackpoint coordinates Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay Todd Kjos <tkjos@xxxxxxxxxx> binder: use cred instead of task for selinux checks Todd Kjos <tkjos@xxxxxxxxxx> binder: use euid from cred instead of using task ------------- Diffstat: .../bindings/regulator/samsung,s5m8767.txt | 23 ++--- Makefile | 4 +- arch/arm/Makefile | 22 ++--- arch/arm/boot/dts/omap-gpmc-smsc9221.dtsi | 2 +- arch/arm/boot/dts/omap3-gta04.dtsi | 2 +- arch/arm/boot/dts/omap3-overo-tobiduo-common.dtsi | 2 +- arch/arm/include/asm/tlb.h | 8 ++ arch/arm/kernel/stacktrace.c | 3 +- arch/arm/mm/Kconfig | 2 +- arch/hexagon/lib/io.c | 4 + arch/ia64/Kconfig.debug | 2 +- arch/ia64/include/asm/tlb.h | 10 ++ arch/m68k/Kconfig.machine | 1 + arch/mips/Kconfig | 4 + arch/mips/bcm63xx/clk.c | 6 ++ arch/mips/kernel/r2300_fpu.S | 4 +- arch/mips/kernel/syscall.c | 9 -- arch/mips/lantiq/xway/dma.c | 14 ++- arch/mips/sni/time.c | 4 +- arch/parisc/kernel/entry.S | 4 +- arch/parisc/kernel/smp.c | 19 +++- arch/parisc/mm/init.c | 4 +- arch/powerpc/boot/dts/charon.dts | 2 +- arch/powerpc/boot/dts/digsy_mtc.dts | 2 +- arch/powerpc/boot/dts/lite5200.dts | 2 +- arch/powerpc/boot/dts/lite5200b.dts | 2 +- arch/powerpc/boot/dts/media5200.dts | 2 +- arch/powerpc/boot/dts/mpc5200b.dtsi | 2 +- arch/powerpc/boot/dts/o2d.dts | 2 +- arch/powerpc/boot/dts/o2d.dtsi | 2 +- arch/powerpc/boot/dts/o2dnt2.dts | 2 +- arch/powerpc/boot/dts/o3dnt.dts | 2 +- arch/powerpc/boot/dts/pcm032.dts | 2 +- arch/powerpc/boot/dts/tqm5200.dts | 2 +- arch/powerpc/net/bpf_jit.h | 25 +++-- arch/powerpc/net/bpf_jit_comp64.c | 37 +++++--- arch/powerpc/platforms/85xx/mpc85xx_pm_ops.c | 3 +- arch/powerpc/sysdev/dcr-low.S | 2 +- arch/s390/include/asm/tlb.h | 14 +++ arch/s390/mm/gmap.c | 5 +- arch/sh/Kconfig.debug | 1 + arch/sh/include/asm/sfp-machine.h | 8 ++ arch/sh/include/asm/tlb.h | 9 ++ arch/sh/kernel/cpu/sh4a/smp-shx3.c | 5 +- arch/um/include/asm/tlb.h | 12 +++ arch/x86/events/intel/uncore_snbep.c | 4 + arch/x86/include/asm/page_64_types.h | 2 +- arch/x86/kernel/irq.c | 4 +- crypto/pcrypt.c | 12 ++- drivers/acpi/acpica/acglobal.h | 2 + drivers/acpi/acpica/hwesleep.c | 8 +- drivers/acpi/acpica/hwsleep.c | 11 +-- drivers/acpi/acpica/hwxfsleep.c | 7 ++ drivers/acpi/battery.c | 2 +- drivers/acpi/pmic/intel_pmic.c | 51 +++++----- drivers/android/binder.c | 23 +++-- drivers/ata/libata-eh.c | 8 ++ drivers/auxdisplay/img-ascii-lcd.c | 10 ++ drivers/cpuidle/sysfs.c | 5 +- drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 13 +++ drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 ++ drivers/dma/at_xdmac.c | 2 +- drivers/dma/dmaengine.h | 2 +- drivers/edac/sb_edac.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 1 + drivers/gpu/drm/drm_plane_helper.c | 1 - drivers/gpu/drm/msm/msm_gem.c | 4 +- drivers/gpu/drm/udl/udl_connector.c | 2 +- drivers/hv/hyperv_vmbus.h | 1 + drivers/hwmon/hwmon.c | 6 +- drivers/hwmon/pmbus/lm25066.c | 23 +++++ drivers/i2c/busses/i2c-xlr.c | 6 +- drivers/iio/dac/ad5446.c | 9 +- drivers/infiniband/hw/mlx4/qp.c | 4 +- drivers/infiniband/hw/qedr/verbs.c | 15 +-- drivers/infiniband/sw/rxe/rxe_param.h | 2 +- drivers/input/mouse/elantech.c | 13 +++ drivers/input/serio/i8042-x86ia64io.h | 14 +++ drivers/irqchip/irq-bcm6345-l1.c | 2 +- drivers/irqchip/irq-s3c24xx.c | 22 ++++- drivers/media/i2c/mt9p031.c | 28 +++++- drivers/media/pci/netup_unidvb/netup_unidvb_core.c | 27 +++--- drivers/media/platform/mtk-vpu/mtk_vpu.c | 5 +- drivers/media/platform/s5p-mfc/s5p_mfc.c | 2 +- drivers/media/radio/si470x/radio-si470x-i2c.c | 2 +- drivers/media/radio/si470x/radio-si470x-usb.c | 2 +- drivers/media/rc/ite-cir.c | 2 +- drivers/media/rc/mceusb.c | 1 + drivers/media/usb/dvb-usb/az6027.c | 1 + drivers/media/usb/dvb-usb/dibusb-common.c | 2 +- drivers/media/usb/uvc/uvc_v4l2.c | 7 +- drivers/memory/fsl_ifc.c | 13 ++- drivers/memstick/core/ms_block.c | 2 +- drivers/memstick/host/jmb38x_ms.c | 2 +- drivers/memstick/host/r592.c | 8 +- drivers/mmc/host/Kconfig | 2 +- drivers/mmc/host/dw_mmc.c | 3 +- drivers/mmc/host/mxs-mmc.c | 10 ++ drivers/mtd/spi-nor/hisi-sfc.c | 1 - drivers/net/bonding/bond_sysfs_slave.c | 36 +++---- .../net/ethernet/broadcom/bnx2x/bnx2x_init_ops.h | 4 +- drivers/net/ethernet/intel/i40evf/i40evf_main.c | 2 +- drivers/net/ethernet/sfc/ptp.c | 4 +- drivers/net/ethernet/sfc/siena_sriov.c | 2 +- drivers/net/ethernet/ti/davinci_emac.c | 16 +++- drivers/net/phy/mdio-mux.c | 6 +- drivers/net/phy/micrel.c | 5 +- drivers/net/tun.c | 5 + drivers/net/vmxnet3/vmxnet3_drv.c | 1 - drivers/net/wireless/ath/ath10k/mac.c | 6 +- drivers/net/wireless/ath/ath10k/wmi.h | 3 + drivers/net/wireless/ath/ath6kl/usb.c | 7 +- drivers/net/wireless/ath/ath9k/main.c | 4 +- drivers/net/wireless/ath/dfs_pattern_detector.c | 10 +- drivers/net/wireless/ath/wcn36xx/main.c | 4 +- drivers/net/wireless/ath/wcn36xx/smd.c | 44 ++++++--- drivers/net/wireless/broadcom/b43/phy_g.c | 2 +- drivers/net/wireless/broadcom/b43legacy/radio.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 3 + drivers/net/wireless/marvell/libertas/if_usb.c | 2 + drivers/net/wireless/marvell/libertas_tf/if_usb.c | 2 + drivers/net/wireless/marvell/mwifiex/11n.c | 5 +- drivers/net/wireless/marvell/mwifiex/pcie.c | 8 ++ drivers/net/wireless/marvell/mwifiex/usb.c | 16 ++++ drivers/net/wireless/marvell/mwl8k.c | 2 +- .../net/wireless/realtek/rtl818x/rtl8187/rtl8225.c | 14 +-- drivers/net/xen-netfront.c | 8 ++ drivers/nfc/pn533/pn533.c | 6 +- drivers/pci/host/pci-aardvark.c | 9 +- drivers/pci/msi.c | 24 ++--- drivers/pci/quirks.c | 1 + drivers/platform/x86/hp_accel.c | 2 + drivers/platform/x86/thinkpad_acpi.c | 2 +- drivers/platform/x86/wmi.c | 9 +- drivers/power/supply/bq27xxx_battery_i2c.c | 3 +- drivers/power/supply/max17042_battery.c | 8 +- drivers/power/supply/rt5033_battery.c | 2 +- drivers/regulator/s5m8767.c | 21 ++--- drivers/scsi/advansys.c | 4 +- drivers/scsi/csiostor/csio_lnode.c | 2 +- drivers/scsi/dc395x.c | 1 + drivers/scsi/lpfc/lpfc_sli.c | 1 + drivers/scsi/qla2xxx/qla_gbl.h | 2 - drivers/scsi/qla2xxx/qla_mr.c | 23 ----- drivers/scsi/qla2xxx/qla_os.c | 27 +----- drivers/sh/maple/maple.c | 5 +- drivers/soc/tegra/pmc.c | 4 +- drivers/spi/spi-bcm-qspi.c | 5 +- drivers/spi/spi-pl022.c | 5 +- drivers/target/target_core_alua.c | 1 - drivers/target/target_core_device.c | 2 + drivers/target/target_core_internal.h | 1 + drivers/target/target_core_transport.c | 76 ++++++++++----- drivers/tty/serial/8250/8250_dw.c | 2 +- drivers/tty/serial/serial_core.c | 16 +++- drivers/tty/serial/xilinx_uartps.c | 3 +- drivers/tty/tty_buffer.c | 3 + drivers/usb/chipidea/core.c | 21 +++-- drivers/usb/gadget/legacy/hid.c | 4 +- drivers/usb/host/max3421-hcd.c | 25 +---- drivers/usb/host/ohci-tmio.c | 2 +- drivers/usb/host/xhci-hub.c | 3 +- drivers/usb/misc/iowarrior.c | 8 +- drivers/usb/musb/tusb6010.c | 5 + drivers/usb/serial/keyspan.c | 15 ++- drivers/video/console/sticon.c | 12 +-- drivers/video/fbdev/chipsfb.c | 2 +- drivers/watchdog/f71808e_wdt.c | 4 +- drivers/watchdog/omap_wdt.c | 6 +- drivers/xen/xen-pciback/conf_space_capability.c | 2 +- fs/btrfs/async-thread.c | 14 +++ fs/btrfs/tree-log.c | 4 +- fs/jfs/jfs_mount.c | 51 +++++----- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 4 +- fs/nfs/pnfs_nfs.c | 4 +- fs/ocfs2/file.c | 8 +- fs/orangefs/dcache.c | 4 +- fs/quota/quota_tree.c | 15 +++ fs/tracefs/inode.c | 3 +- include/asm-generic/tlb.h | 2 + include/linux/console.h | 2 + include/linux/filter.h | 1 + include/linux/libata.h | 2 +- include/linux/lsm_hooks.h | 32 +++---- include/linux/security.h | 28 +++--- include/net/llc.h | 4 +- include/target/target_core_base.h | 6 +- include/uapi/linux/pci_regs.h | 6 ++ kernel/bpf/core.c | 4 +- kernel/cgroup.c | 31 ++++++- kernel/locking/lockdep.c | 2 +- kernel/power/swap.c | 5 +- kernel/sched/core.c | 3 + kernel/signal.c | 17 +--- kernel/trace/tracing_map.c | 40 ++++---- lib/decompress_unxz.c | 2 +- lib/xz/xz_dec_lzma2.c | 21 ++++- lib/xz/xz_dec_stream.c | 6 +- mm/hugetlb.c | 72 ++++++++++++-- mm/memory.c | 16 ++++ mm/oom_kill.c | 23 ++--- mm/slab.h | 2 +- mm/zsmalloc.c | 7 +- net/batman-adv/bat_v_ogm.c | 11 ++- net/batman-adv/bridge_loop_avoidance.c | 103 +++++++++++++++++---- net/batman-adv/fragmentation.c | 42 ++++++--- net/batman-adv/hard-interface.c | 3 + net/batman-adv/multicast.c | 31 +++++++ net/batman-adv/multicast.h | 15 +++ net/batman-adv/soft-interface.c | 5 +- net/bluetooth/l2cap_sock.c | 10 +- net/bluetooth/sco.c | 24 +++-- net/core/stream.c | 3 - net/core/sysctl_net_core.c | 2 +- net/netfilter/nfnetlink_queue.c | 2 +- net/nfc/core.c | 32 ++++--- net/nfc/nci/core.c | 11 ++- net/vmw_vsock/af_vsock.c | 2 + net/wireless/util.c | 1 + samples/kprobes/kretprobe_example.c | 2 +- security/integrity/evm/evm_main.c | 2 +- security/security.c | 14 +-- security/selinux/hooks.c | 31 +++---- security/smack/smackfs.c | 11 ++- sound/core/oss/mixer_oss.c | 43 +++++++-- sound/core/timer.c | 17 ++-- sound/isa/gus/gus_dma.c | 2 + sound/soc/soc-dapm.c | 29 ++++-- sound/synth/emux/emux.c | 2 +- sound/usb/6fire/comm.c | 2 +- sound/usb/6fire/firmware.c | 6 +- sound/usb/line6/driver.c | 14 +-- sound/usb/line6/driver.h | 2 +- sound/usb/line6/podhd.c | 6 +- sound/usb/line6/toneport.c | 2 +- sound/usb/misc/ua101.c | 4 +- 236 files changed, 1499 insertions(+), 747 deletions(-)
