I'm announcing the release of the 3.16.40 kernel. All users of the 3.16 kernel series should upgrade. The updated 3.16.y git tree can be found at: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.16.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git The diff from 3.16.39 is attached to this message. Ben. ------------ MAINTAINERS | 9 +- Makefile | 7 +- arch/arc/kernel/signal.c | 7 +- arch/arm/boot/dts/exynos4210-pinctrl.dtsi | 2 +- arch/arm/mach-pxa/corgi_pm.c | 13 +- arch/arm/mach-pxa/include/mach/sharpsl_pm.h | 2 +- arch/arm/mach-pxa/sharpsl_pm.c | 2 +- arch/arm/mach-pxa/spitz_pm.c | 9 +- arch/arm64/include/asm/kvm_emulate.h | 11 +- arch/arm64/kernel/debug-monitors.c | 6 +- arch/arm64/kernel/head.S | 3 +- arch/m68k/include/asm/delay.h | 2 +- arch/metag/include/asm/atomic.h | 3 +- arch/mips/cavium-octeon/setup.c | 14 + arch/mips/include/asm/kexec.h | 1 + arch/mips/include/asm/kvm_host.h | 7 +- arch/mips/include/asm/ptrace.h | 2 +- arch/mips/kernel/crash.c | 18 +- arch/mips/kernel/machine_kexec.c | 1 + arch/mips/kvm/kvm_mips_emul.c | 39 ++- arch/parisc/include/asm/pgtable.h | 8 +- arch/parisc/kernel/pacache.S | 49 ++-- arch/parisc/kernel/pci-dma.c | 2 +- arch/parisc/kernel/syscall.S | 11 +- arch/powerpc/include/asm/kvm_book3s.h | 1 + arch/powerpc/include/asm/kvm_host.h | 2 +- arch/powerpc/include/asm/reg.h | 1 + arch/powerpc/kernel/asm-offsets.c | 2 +- arch/powerpc/kernel/eeh_driver.c | 12 +- arch/powerpc/kernel/idle_power7.S | 2 +- arch/powerpc/kernel/nvram_64.c | 6 +- arch/powerpc/kernel/vdso64/datapage.S | 2 +- arch/powerpc/kernel/vdso64/gettimeofday.S | 2 +- arch/powerpc/kvm/book3s_emulate.c | 2 + arch/powerpc/kvm/book3s_hv.c | 4 +- arch/powerpc/kvm/book3s_hv_rmhandlers.S | 14 +- arch/powerpc/kvm/book3s_pr.c | 6 + arch/powerpc/kvm/booke.c | 2 +- arch/powerpc/lib/copyuser_64.S | 2 +- arch/powerpc/platforms/powernv/eeh-ioda.c | 5 + arch/powerpc/platforms/powernv/pci.c | 4 +- arch/powerpc/platforms/pseries/lpar.c | 4 +- arch/s390/hypfs/hypfs_diag.c | 6 +- arch/tile/kernel/time.c | 4 +- arch/x86/include/asm/kexec.h | 1 + arch/x86/include/asm/smp.h | 1 + arch/x86/include/asm/uaccess.h | 10 +- arch/x86/kernel/apic/x2apic_uv_x.c | 4 +- arch/x86/kernel/cpu/perf_event.c | 2 +- arch/x86/kernel/cpu/perf_event_intel.c | 2 +- arch/x86/kernel/crash.c | 22 +- arch/x86/kernel/head_32.S | 2 +- arch/x86/kernel/ptrace.c | 4 +- arch/x86/kernel/smp.c | 5 + arch/x86/kvm/emulate.c | 36 +-- arch/x86/kvm/x86.c | 20 +- block/blk-cgroup.h | 2 +- block/bsg.c | 3 + crypto/async_tx/async_pq.c | 8 +- crypto/gcm.c | 2 +- drivers/acpi/apei/ghes.c | 2 +- drivers/base/platform.c | 4 +- drivers/base/power/main.c | 8 +- drivers/block/nvme-core.c | 6 +- drivers/char/hw_random/core.c | 6 +- drivers/char/virtio_console.c | 22 +- drivers/clk/clk-divider.c | 2 +- drivers/firewire/net.c | 8 +- drivers/gpio/gpio-mvebu.c | 94 +++--- drivers/gpu/drm/i915/intel_crt.c | 10 +- drivers/gpu/drm/i915/intel_drv.h | 2 +- drivers/gpu/drm/i915/intel_pm.c | 9 + drivers/gpu/drm/radeon/ni.c | 4 +- drivers/gpu/drm/radeon/r600_dpm.c | 15 +- drivers/gpu/drm/radeon/radeon_device.c | 5 +- drivers/gpu/drm/radeon/si_dpm.c | 55 +++- drivers/gpu/drm/radeon/sislands_smc.h | 1 + drivers/hid/hid-core.c | 3 + drivers/hid/hid-ids.h | 2 + drivers/hid/usbhid/hid-quirks.c | 2 + drivers/hv/hv_util.c | 10 +- drivers/i2c/i2c-core.c | 2 +- .../iio/common/hid-sensors/hid-sensor-attributes.c | 60 ++-- drivers/infiniband/core/cm.c | 125 +++++++- drivers/infiniband/core/umem.c | 2 +- drivers/infiniband/core/uverbs_main.c | 7 +- drivers/infiniband/hw/mlx4/cq.c | 5 +- drivers/infiniband/hw/mlx5/cq.c | 3 +- drivers/infiniband/hw/mlx5/mlx5_ib.h | 2 + drivers/infiniband/hw/mlx5/mr.c | 6 +- drivers/infiniband/hw/mlx5/qp.c | 5 +- drivers/infiniband/ulp/srp/ib_srp.c | 8 +- drivers/input/mouse/elantech.c | 11 +- drivers/input/serio/i8042-x86ia64io.h | 7 + drivers/iommu/amd_iommu.c | 3 + drivers/iommu/dmar.c | 4 +- drivers/iommu/intel-iommu.c | 13 + drivers/isdn/gigaset/ser-gigaset.c | 4 +- drivers/md/dm-mpath.c | 6 +- drivers/md/dm-table.c | 24 +- drivers/md/dm.c | 5 + drivers/md/md.c | 2 +- drivers/media/dvb-frontends/mb86a20s.c | 104 +++---- drivers/media/tuners/tuner-xc2028.c | 37 +-- drivers/media/usb/cx231xx/cx231xx-avcore.c | 5 +- drivers/media/usb/cx231xx/cx231xx-cards.c | 2 +- drivers/media/usb/cx231xx/cx231xx-core.c | 3 +- drivers/media/usb/dvb-usb/dib0700_core.c | 5 +- drivers/memstick/host/rtsx_usb_ms.c | 6 + drivers/mfd/Kconfig | 1 + drivers/mfd/mfd-core.c | 2 + drivers/mfd/rtsx_usb.c | 10 +- drivers/misc/genwqe/card_utils.c | 12 +- drivers/misc/mei/hw-txe.c | 6 +- drivers/misc/mei/nfc.c | 2 +- drivers/mmc/card/block.c | 5 +- drivers/mmc/card/queue.h | 2 +- drivers/mmc/host/moxart-mmc.c | 5 +- drivers/mmc/host/mxs-mmc.c | 4 +- drivers/mmc/host/rtsx_usb_sdmmc.c | 7 +- drivers/mmc/host/sdhci.c | 2 +- drivers/mtd/ubi/eba.c | 4 +- drivers/mtd/ubi/fastmap.c | 22 +- drivers/mtd/ubi/wl.c | 45 ++- drivers/net/can/usb/peak_usb/pcan_usb_core.c | 6 +- drivers/net/ethernet/broadcom/bcmsysport.c | 2 +- drivers/net/ethernet/broadcom/bgmac.c | 5 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 11 +- drivers/net/ethernet/cirrus/ep93xx_eth.c | 4 + drivers/net/ethernet/intel/i40e/i40e_main.c | 6 + drivers/net/ethernet/marvell/mvneta.c | 2 +- drivers/net/ethernet/mellanox/mlx4/cmd.c | 23 +- drivers/net/ethernet/mellanox/mlx4/en_clock.c | 5 +- drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 7 + drivers/net/ethernet/mellanox/mlx4/en_port.c | 2 +- drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +- drivers/net/ethernet/mellanox/mlx4/mcg.c | 7 +- drivers/net/ethernet/mellanox/mlx4/mlx4.h | 7 +- drivers/net/ethernet/mellanox/mlx4/port.c | 13 +- .../net/ethernet/mellanox/mlx5/core/pagealloc.c | 26 +- drivers/net/ethernet/renesas/sh_eth.c | 2 +- drivers/net/ethernet/ti/cpsw-phy-sel.c | 3 + drivers/net/ethernet/ti/cpsw.c | 16 +- drivers/net/wireless/mwifiex/cfg80211.c | 13 +- drivers/net/wireless/rtlwifi/regd.c | 45 ++- drivers/net/wireless/rtlwifi/regd.h | 1 + drivers/of/of_mdio.c | 5 +- drivers/pci/quirks.c | 1 + drivers/phy/phy-sun4i-usb.c | 11 +- drivers/pwm/core.c | 2 + drivers/pwm/sysfs.c | 20 ++ drivers/regulator/tps65910-regulator.c | 6 + drivers/s390/char/con3270.c | 11 +- drivers/s390/scsi/zfcp_dbf.c | 162 +++++++++-- drivers/s390/scsi/zfcp_dbf.h | 14 +- drivers/s390/scsi/zfcp_erp.c | 12 +- drivers/s390/scsi/zfcp_ext.h | 8 +- drivers/s390/scsi/zfcp_fsf.c | 22 +- drivers/s390/scsi/zfcp_fsf.h | 4 +- drivers/s390/scsi/zfcp_scsi.c | 8 +- drivers/scsi/arcmsr/arcmsr_hba.c | 9 - drivers/scsi/ibmvscsi/ibmvfc.c | 1 - drivers/scsi/megaraid/megaraid_sas.h | 2 +- drivers/scsi/megaraid/megaraid_sas_base.c | 13 +- drivers/scsi/mpt3sas/mpt3sas_scsih.c | 15 +- drivers/scsi/scsi_debug.c | 1 + drivers/scsi/scsi_scan.c | 2 +- drivers/scsi/sg.c | 8 +- drivers/staging/android/ion/ion.c | 55 +++- drivers/staging/iio/impedance-analyzer/ad5933.c | 17 +- drivers/staging/nvec/nvec_ps2.c | 8 +- drivers/staging/rtl8188eu/os_dep/usb_intf.c | 4 +- drivers/target/target_core_transport.c | 11 + drivers/target/target_core_xcopy.c | 34 ++- drivers/tty/tty_ldisc.c | 7 + drivers/tty/vt/vt.c | 7 +- drivers/uio/uio_dmem_genirq.c | 2 +- drivers/usb/chipidea/core.c | 1 + drivers/usb/chipidea/udc.c | 2 - drivers/usb/class/cdc-acm.c | 2 - drivers/usb/class/usbtmc.c | 3 +- drivers/usb/gadget/f_fs.c | 1 - drivers/usb/gadget/u_ether.c | 7 - drivers/usb/host/xhci-hub.c | 37 +++ drivers/usb/host/xhci-pci.c | 10 +- drivers/usb/host/xhci.h | 3 + drivers/usb/misc/legousbtower.c | 35 ++- drivers/usb/serial/cp210x.c | 2 + drivers/usb/serial/ftdi_sio.c | 5 +- drivers/usb/serial/ftdi_sio_ids.h | 11 +- drivers/usb/serial/usb-serial.c | 3 +- drivers/usb/storage/transport.c | 7 +- drivers/uwb/lc-rc.c | 16 +- drivers/uwb/pal.c | 2 + drivers/video/fbdev/core/fbcmap.c | 26 +- drivers/video/fbdev/efifb.c | 6 +- fs/btrfs/tree-log.c | 20 +- fs/cifs/cifs_debug.c | 1 + fs/cifs/cifsfs.c | 3 +- fs/cifs/cifsglob.h | 30 +- fs/cifs/cifssmb.c | 4 +- fs/cifs/connect.c | 2 +- fs/cifs/file.c | 66 +++-- fs/cifs/misc.c | 15 +- fs/cifs/readdir.c | 6 +- fs/cifs/smb2glob.h | 10 + fs/cifs/smb2inode.c | 6 + fs/cifs/smb2misc.c | 16 +- fs/cifs/smb2ops.c | 5 +- fs/cifs/smb2pdu.c | 21 +- fs/cifs/smb2pdu.h | 2 +- fs/coredump.c | 3 + fs/ext4/ext4.h | 1 + fs/ext4/inode.c | 10 +- fs/ext4/namei.c | 14 +- fs/ext4/super.c | 17 +- fs/fuse/dir.c | 62 +++- fs/fuse/file.c | 8 +- fs/isofs/inode.c | 8 +- fs/jbd2/transaction.c | 3 +- fs/nfs/nfs4state.c | 3 + fs/proc/proc_sysctl.c | 3 +- fs/pstore/ram_core.c | 49 +--- fs/reiserfs/super.c | 12 +- fs/super.c | 6 +- fs/ubifs/dir.c | 16 +- fs/ubifs/xattr.c | 2 + fs/xfs/xfs_acl.c | 3 +- fs/xfs/xfs_file.c | 2 +- fs/xfs/xfs_inode.c | 2 +- fs/xfs/xfs_ioctl.c | 2 +- fs/xfs/xfs_iops.c | 96 +++--- fs/xfs/xfs_iops.h | 7 +- include/linux/compiler.h | 2 +- include/linux/filter.h | 6 +- include/linux/hugetlb.h | 6 +- include/linux/mfd/88pm80x.h | 4 +- include/linux/pwm.h | 5 + include/linux/sem.h | 1 + include/linux/sunrpc/svc_rdma.h | 9 + include/net/ip6_tunnel.h | 1 + include/net/netfilter/nf_tables.h | 1 + include/net/sock.h | 9 +- include/net/tcp.h | 1 + include/target/target_core_base.h | 1 + include/uapi/linux/can.h | 1 + ipc/msg.c | 34 ++- ipc/sem.c | 165 ++++++----- ipc/shm.c | 42 +-- ipc/util.c | 6 +- kernel/events/core.c | 324 +++++++++++++++++---- kernel/irq/generic-chip.c | 22 ++ kernel/locking/rtmutex.c | 68 ++++- kernel/panic.c | 48 ++- kernel/power/suspend_test.c | 4 +- lib/genalloc.c | 3 +- lib/mpi/mpi-pow.c | 7 +- mm/filemap.c | 5 +- mm/hugetlb.c | 39 ++- mm/memory_hotplug.c | 4 +- mm/swapfile.c | 2 + net/batman-adv/translation-table.c | 4 +- net/bridge/br_multicast.c | 23 +- net/can/bcm.c | 32 +- net/can/raw.c | 3 + net/core/filter.c | 10 +- net/core/rtnetlink.c | 8 +- net/core/sock.c | 30 +- net/dccp/ipv4.c | 2 +- net/dccp/ipv6.c | 2 +- net/ipv4/ip_output.c | 7 +- net/ipv4/ip_sockglue.c | 7 +- net/ipv4/netfilter/arp_tables.c | 4 +- net/ipv4/ping.c | 4 + net/ipv4/route.c | 6 +- net/ipv4/sysctl_net_ipv4.c | 8 +- net/ipv4/tcp_ipv4.c | 19 +- net/ipv6/addrconf.c | 2 +- net/ipv6/ip6_output.c | 2 +- net/ipv6/output_core.c | 2 + net/ipv6/tcp_ipv6.c | 6 +- net/l2tp/l2tp_ip.c | 5 +- net/l2tp/l2tp_ip6.c | 5 +- net/mac80211/rx.c | 24 +- net/netfilter/nf_conntrack_core.c | 7 + net/netfilter/nf_conntrack_sip.c | 5 +- net/netfilter/nf_tables_api.c | 29 +- net/netfilter/nfnetlink.c | 9 +- net/netfilter/nft_bitwise.c | 7 +- net/netfilter/nft_byteorder.c | 15 +- net/netfilter/nft_cmp.c | 3 + net/netfilter/nft_exthdr.c | 13 +- net/netfilter/nft_immediate.c | 4 + net/netlink/af_netlink.c | 7 +- net/packet/af_packet.c | 29 +- net/rose/rose_in.c | 3 +- net/sched/sch_fq.c | 32 +- net/sctp/sm_sideeffect.c | 16 +- net/sctp/sm_statefuns.c | 12 +- net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 2 +- net/sunrpc/xprtrdma/svc_rdma_sendto.c | 20 +- net/sunrpc/xprtrdma/svc_rdma_transport.c | 20 +- net/tipc/bearer.c | 13 +- net/tipc/bearer.h | 16 + net/wireless/core.h | 1 + net/wireless/scan.c | 69 +++++ scripts/gcc-x86_64-has-stack-protector.sh | 2 +- security/apparmor/domain.c | 6 +- sound/core/pcm_lib.c | 2 +- sound/pci/ali5451/ali5451.c | 2 + sound/pci/hda/hda_intel.c | 7 +- sound/pci/hda/patch_realtek.c | 14 + sound/pci/hda/thinkpad_helper.c | 3 + sound/soc/codecs/cs4270.c | 8 +- sound/soc/soc-dapm.c | 2 +- sound/usb/mixer_quirks.c | 22 +- sound/usb/quirks-table.h | 17 ++ tools/perf/util/symbol-elf.c | 2 +- tools/perf/util/symbol.c | 2 +- 319 files changed, 2888 insertions(+), 1273 deletions(-) Al Viro (2): arc: don't leak bits of kernel stack into coredump sg_write()/bsg_write() is not fit to be called under KERNEL_DS Alan Stern (1): memstick: rtsx_usb_ms: Runtime resume the device when polling for cards Alex Deucher (4): drm/radeon: narrow asic_init for virtualization drm/radeon/si/dpm: fix phase shedding setup drm/radeon: change vblank_time's calculation method to reduce computational error. drm/radeon/si_dpm: workaround for SI kickers Alexander Usyskin (2): mei: txe: don't clean an unprocessed interrupt cause. mei: bus: fix received data size check in NFC fixup Andrew Bresticker (1): pstore/ram: Use memcpy_fromio() to save old buffer Andrew Donnellan (1): powerpc/eeh: Fix deadlock when PE frozen state can't be cleared Andrew Lunn (1): net: ethernet: mvneta: Remove IFF_UNICAST_FLT which is not implemented Andrew Lutomirski (1): hwrng: core - Don't use a stack buffer in add_early_randomness() Andrey Grodzovsky (1): scsi: mpt3sas: Fix secure erase premature termination Andrey Ryabinin (2): coredump: fix unfreezable coredumping task mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] Andy Gospodarek (1): bgmac: stop clearing DMA receive control register right after it is set Andy Lutomirski (1): x86/traps: Ignore high word of regs->cs in early_fixup_exception() Anssi Hannula (1): ALSA: usb-audio: Extend DragonFly dB scale quirk to cover other variants Anton Blanchard (1): powerpc/vdso64: Use double word compare on pointers Ard Biesheuvel (1): ALSA: hda - allow 40 bit DMA mask for NVidia devices Arnaldo Carvalho de Melo (1): perf symbols: Fixup symbol sizes before picking best ones Arnd Bergmann (1): staging: iio: ad5933: avoid uninitialized variable in error case Ashok Raj (1): iommu/vt-d: Fix IOMMU lookup for SR-IOV Virtual Functions Baoquan He (1): iommu/amd: Free domain id when free a domain of struct dma_ops_domain Bart Van Assche (3): dm: mark request_queue dead before destroying the DM device blkcg: Annotate blkg_hint correctly IB/srp: Fix infinite loop when FMR sg[0].offset != 0 Ben Hutchings (3): Revert "fs: Give dentry to inode_change_ok() instead of inode" net: Add __sock_queue_rcv_skb() Linux 3.16.40 Benjamin Tissoires (1): HID: core: prevent out-of-bound readings Boris Brezillon (2): UBI: fastmap: scrub PEB when bitflips are detected in a free PEB EC header m68k: Fix ndelay() macro Borislav Petkov (1): kbuild: Steal gcc's pie from the very beginning Brian King (1): scsi: ibmvfc: Fix I/O hang when port is not mapped Brian Norris (2): PM / sleep: don't suspend parent when async child suspend_{noirq, late} fails mwifiex: printk() overflow with 32-byte SSIDs Calvin Owens (1): sg: Fix double-free when drives detach during SG_IO Chen-Yu Tsai (2): ASoC: dapm: Fix value setting for _ENUM_DOUBLE MUX's second channel phy: sun4i-usb: Use spinlock to guard phyctl register access Ching Huang (1): scsi: arcmsr: Send SYNCHRONIZE_CACHE command to firmware Chris Brandt (1): sh_eth: remove unchecked interrupts for RZ/A1 Chris Mason (1): btrfs: fix races on root_log_ctx lists Chris Metcalf (1): tile: avoid using clocksource_cyc2ns with absolute cycle count Chuck Lever (1): svcrdma: Tail iovec leaves an orphaned DMA mapping Daeho Jeong (1): ext4: reinforce check of i_dtime when clearing high fields of uid and gid Dan Carpenter (6): KVM: PPC: BookE: Fix a sanity check mfd: 88pm80x: Double shifting bug in suspend/resume scsi: zfcp: spin_lock_irqsave() is not nestable netfilter: nf_tables: underflow in nft_parse_u32_check() x86/apic/uv: Silence a shift wrapping warning ser_gigaset: return -ENOMEM on error instead of success Daniel Glöckner (1): mmc: block: don't use CMD23 with very old MMC cards Daniel Jurgens (1): IB/mlx5: Use cache line size to select CQE stride Daniel Mentz (1): lib/genalloc.c: start search from start of chunk Dave Chinner (1): xfs: change mailing list address David Hsu (1): pwm: Unexport children before chip removal Dinesh Israni (1): target: Don't override EXTENDED_COPY xcopy_pt_cmd SCSI status code Dmitry Torokhov (1): Input: elantech - add Fujitsu Lifebook E556 to force crc_enabled Dmitry Vyukov (1): tty: limit terminal size to 4M chars Doug Brown (1): USB: serial: ftdi_sio: add support for TI CC3200 LaunchPad Eli Cohen (1): IB/mlx5: Fix NULL pointer dereference on debug print Eli Cooper (3): ip6_tunnel: Clear IP6CB in ip6tunnel_xmit() ipv4: Set skb->protocol properly for local output ipv6: Set skb->protocol properly for local output Erez Shitrit (1): net/mlx4_en: Process all completions in RX rings after port goes up Eric Dumazet (5): ipv4: accept u8 in IP_TOS ancillary data pkt_sched: fq: use proper locking in fq_dump_stats() netlink: do not enter direct reclaim from netlink_dump() tcp: take care of truncations done by sk_filter() net: avoid signed overflows for SO_{SND|RCV}BUFFORCE Eugenia Emantayev (1): net/mlx4_en: Resolve dividing by zero in 32-bit system EunTaik Lee (1): staging/android/ion : fix a race condition in the ion driver Ewan D. Milne (1): scsi: scsi_debug: Fix memory leak if LBP enabled and module is unloaded Fabio Estevam (1): mmc: mxs: Initialize the spinlock prior to using it Felipe Balbi (1): usb: gadget: u_ether: remove interrupt throttling Florian Fainelli (3): net: systemport: Fix ordering in intrl2_*_mask_clear macro net: bcmgenet: Utilize correct struct device for all DMA operations net: ep93xx_eth: Do not crash unloading module Florian Westphal (1): netfilter: restart search if moved to other chain Furquan Shaikh (1): pstore/ram: Use memcpy_toio instead of memcpy Gavin Shan (1): powerpc/powernv: Use CPU-endian PEST in pnv_pci_dump_p7ioc_diag_data() Geert Uytterhoeven (1): clk: divider: Fix clk_divider_round_rate() to use clk_readl() Gerald Schaefer (3): mm/hugetlb: fix memory offline with hugepage size > memory block size mm/hugetlb: check for reserved hugepages during memory offline GenWQE: Fix bad page access during abort of resource allocation Greg Kroah-Hartman (2): usb: misc: legousbtower: Fix NULL pointer deference Revert "usbtmc: convert to devm_kzalloc" Guenter Roeck (1): metag: Only define atomic_dec_if_positive conditionally Guilherme G Piccoli (1): i40e: avoid NULL pointer dereference and recursive errors on early PCI error Guillaume Nault (1): l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() Haibo Chen (1): mmc: sdhci: cast unsigned int to unsigned long long to avoid unexpeted error Hidehiro Kawai (2): x86/panic: replace smp_send_stop() with kdump friendly version in panic path mips/panic: replace smp_send_stop() with kdump friendly version in panic path Hongxu Jia (1): netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in 64bit kernel Hui Wang (2): ALSA: hda - Adding one more ALC255 pin definition for headset problem ALSA: hda - add a new condition to check if it is thinkpad Ido Yariv (1): KVM: x86: fix wbinvd_dirty_mask use-after-free Ignacio Alvarado (1): KVM: Disable irq while unregistering user notifier Jack Morgenstein (4): net/mlx4_core: Fix deadlock when switching between polling and event fw commands net/mlx4_core: Fix the resource-type enum in res tracker to conform to FW spec net/mlx4_en: Fix potential deadlock in port statistics flow net/mlx4: Fix uninitialized fields in rule when adding promiscuous mode to device managed flow steering Jakub Sitnicki (1): ipv6: Don't use ufo handling on later transformed packets James Hogan (2): KVM: MIPS: Make ERET handle ERL before EXL KVM: MIPS: Precalculate MMIO load resume PC Jan Kara (4): xfs: Propagate dentry down to inode_change_ok() fuse: Propagate dentry down to inode_change_ok() fs: Give dentry to inode_change_ok() instead of inode isofs: Do not return EACCES for unknown filesystems Jan Remmet (1): regulator: tps65910: Work around silicon erratum SWCZ010 Jan Viktorin (1): uio: fix dmem_region_start computation Jann Horn (1): swapfile: fix memory corruption via malformed swapfile Jason Gunthorpe (1): gpio/mvebu: Use irq_domain_add_linear Jiri Slaby (2): mmc: core: Annotate cmd_hdr as __le32 tty: vt, fix bogus division in csi_J Joe Perches (1): ipc: remove use of seq_printf return value Johan Hovold (11): USB: serial: fix potential NULL-dereference at probe uwb: fix device reference leaks PM / sleep: fix device reference leak in test_suspend net: ethernet: ti: cpsw: fix device and of_node leaks USB: cdc-acm: fix TIOCMIWAIT mfd: core: Fix device reference leak in mfd_clone_cell of_mdio: fix node leak in of_phy_register_fixed_link error path net: ethernet: ti: cpsw: fix bad register access in probe error path net: ethernet: ti: cpsw: fix mdio device reference leak net: ethernet: ti: cpsw: fix secondary-emac probe error path pwm: Fix device reference leak Johannes Berg (2): mac80211: discard multicast and 4-addr A-MSDUs cfg80211: limit scan results cache size Johannes Weiner (1): mm: filemap: fix mapping->nrpages double accounting in fuse John David Anglin (5): parisc: Ensure consistent state when switching to kernel stack at syscall entry parisc: Fix race in pci-dma.c parisc: Also flush data TLB in flush_icache_page_asm parisc: Purge TLB before setting PTE parisc: Remove unnecessary TLB purges from flush_dcache_page_asm and flush_icache_page_asm John Johansen (1): apparmor: fix change_hat not finding hat after policy replacement John W. Linville (1): netfilter: nf_tables: fix type mismatch with error return from nft_parse_u32_check Josh Poimboeuf (1): x86/dumpstack: Fix x86_32 kernel_stack_pointer() previous stack access Justin Maggard (1): async_pq_val: fix DMA memory leak Kamal Heib (1): net/mlx4_en: Fix wrong indentation Kashyap Desai (1): scsi: megaraid_sas: Fix data integrity failure for JBOD (passthrough) devices Kees Cook (2): net: ping: check minimum size on ICMP header length fbdev: color map copying bounds checking Keith Busch (1): nvme/pci: Don't free queues on error Krzysztof Kozlowski (1): ARM: dts: exynos: Fix mismatched value for SD4 pull up/down configuration on exynos4210 Kyle Jones (1): USB: serial: cp210x: Add ID for a Juniper console Lance Richardson (1): ipv4: allow local fragmentation in ip_finish_output_gso() Larry Finger (1): rtlwifi: Fix missing country code for Great Britain Lars-Peter Clausen (1): usb: gadget: f_fs: Fix use-after-free Laura Abbott (1): HID: usbhid: Add HID_QUIRK_NOGET for Aten DVI KVM switch Laura Garcia Liebana (2): netfilter: nft_exthdr: Add size check on u8 nft_exthdr attributes netfilter: nf_tables: validate maximum value of u32 netlink attributes Laurent Dufour (1): powerpc/pseries: Fix stack corruption in htpe code Linus Torvalds (2): Fix potential infoleak in older kernels vfs,mm: fix return value of read() at s_maxbytes Liping Zhang (1): netfilter: nf_tables: destroy the set if fail to add transaction Long Li (1): hv: do not lose pending heartbeat vmbus packets Lu Baolu (1): mfd: rtsx_usb: Avoid setting ucr->current_sg.status Lucas Stach (1): drm/radeon: drop register readback in cayman_cp_int_cntl_setup Lyude (2): drm/i915/vlv: Make intel_crt_reset() per-encoder drm/i915/vlv: Reset the ADPA in vlv_display_power_well_init() Maik Broemme (1): PCI: Mark Atheros AR9580 to avoid bus reset Manfred Spraul (1): ipc/sem.c: fix complex_count vs. simple op race Marc Dietrich (1): staging: nvec: remove managed resource from PS2 driver Marc Kleine-Budde (1): can: raw: raw_setsockopt: limit number of can_filter that can be set Marc Zyngier (1): arm64: kernel: Init MDCR_EL2 even in the absence of a PMU Marcel Hasler (1): ALSA: usb-audio: Add quirk for Syntek STK1160 Marcelo Ricardo Leitner (1): sctp: validate chunk len before actually using it Marcin Nowakowski (1): MIPS: ptrace: Fix regs_return_value for kernel context Mark Bloch (2): IB/cm: Mark stale CM id's whenever the mad agent was unregistered IB/core: Avoid unsigned int overflow in sg_alloc_table Matan Barak (1): IB/mlx4: Fix create CQ error flow Mathias Krause (1): rtnl: reset calcit fptr in rtnl_unregister() Mathias Nyman (2): xhci: add restart quirk for Intel Wildcatpoint PCH xhci: workaround for hosts missing CAS bit Matt Redfearn (1): virtio: console: Unlock vqs while freeing buffers Mauro Carvalho Chehab (4): mb86a20s: fix the locking logic mb86a20s: fix demod settings cx231xx: don't return error on success cx231xx: fix GPIOs for Pixelview SBTVD hybrid Max Staudt (1): fbdev/efifb: Fix 16 color palette entry calculation Michael Holzheu (1): s390/hypfs: Use get_free_page() instead of kmalloc to ensure page alignment Michal Kubeček (1): tipc: check minimum bearer MTU Mike Galbraith (1): reiserfs: Unlock superblock before calling reiserfs_quota_on_mount() Mike Snitzer (1): dm mpath: check if path's request_queue is dying in activate_path() Miklos Szeredi (5): fuse: invalidate dir dentry after chmod fuse: fix killing s[ug]id in setattr fuse: listxattr: verify xattr list fuse: fix fuse_write_end() if zero bytes were copied fuse: fix clearing suid, sgid for chown() Ming Lei (1): scsi: Fix use-after-free Moshe Lazer (1): IB/mlx5: Resolve soft lock on massive reg MRs NeilBrown (1): md: be careful not lot leak internal curr_resync value into metadata. -- (all) Nicholas Bellinger (1): target: Make EXTENDED_COPY 0xe4 failure return COPY TARGET DEVICE NOT REACHABLE Nicholas Mc Guire (2): mmc: moxart: fix wait_for_completion_interruptible_timeout return variable type MIPS: KVM: Fix unused variable build warning Nicolas Dichtel (1): ipv6: correctly add local routes when lo goes up Nikolay Aleksandrov (1): bridge: multicast: restore perm router ports on multicast enable Noa Osherovich (1): net/mlx5: Avoid passing dma address 0 to firmware Oleg Nesterov (1): fs/super.c: fix race between freeze_super() and thaw_super() Oliver Hartkopp (1): can: bcm: fix warning in bcm_connect/proc_register Oliver Neukum (1): HID: usbhid: add ATEN CS962 to list of quirky devices Ondrej Mosnáček (1): crypto: gcm - Fix IV buffer size in crypto_gcm_setkey Pan Xinhui (1): powerpc/nvram: Fix an incorrect partition merge Paolo Bonzini (1): KVM: x86: fix missed SRCU usage in kvm_lapic_set_vapic_addr Patrick Scheuring (1): Input: i8042 - add XMG C504 to keyboard reset table Paul E. McKenney (1): compiler: Allow 1- and 2-byte smp_load_acquire() and smp_store_release() Paul Fertser (2): drivers: staging: nvec: remove bogus reset command for PS/2 interface Revert "staging: nvec: ps2: change serio type to passthrough" Paul Jakma (1): USB: serial: cp210x: add ID for the Zone DPMX Paul Mackerras (2): KVM: PPC: Book3S: Treat VTB as a per-subcore register, not per-thread powerpc/64: Fix incorrect return value from __copy_tofrom_user Peter Chen (1): usb: chipidea: move the lock initialization to core file Peter Hurley (1): tty: Prevent ldisc drivers from re-using stale tty fields Peter Zijlstra (4): perf: Fix race in swevent hash perf: Fix event->ctx locking perf: Do not double free perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race Peter Zijlstra (Intel) (1): perf/x86: Fix full width counter, counter overflow Petr Vandrovec (1): Fix USB CB/CBI storage devices with CONFIG_VMAP_STACK=y Phil Turnbull (1): netfilter: nfnetlink: correctly validate length of batch messages Philip Pettersson (1): packet: fix race condition in packet_set_ring Punit Agrawal (1): ACPI / APEI: Fix incorrect return value of ghes_proc() Radim Krčmář (1): KVM: x86: drop error recovery in em_jmp_far and em_ret_far Richard Weinberger (6): ubi: Deal with interrupted erasures in WL ubi: Fix races around ubi_refill_pools() ubi: Fix Fastmap's update_vol() ubifs: Fix xattr_names length in exit paths ubifs: Abort readdir upon error ubifs: Fix regression in ubifs_readdir() Robert Jarzmik (1): ARM: pxa: fix GPIO double shifts Ross Lagerwall (1): cifs: Limit the overall credit acquired Russell Currey (1): powerpc/eeh: Null check uses of eeh_pe_bus_get Sabrina Dubroca (1): rtnetlink: fix rtnl_vfinfo_size Sachin Kamat (1): iio: hid-sensors: Fix compilation warning Sascha Silbe (2): s390/con3270: fix use of uninitialised data s390/con3270: fix insufficient space padding Scot Doyle (1): vt: clear selection before resizing Sean Young (1): dib0700: fix nec repeat handling Sebastian Andrzej Siewior (3): pstore/core: drop cmpxchg based updates kbuild: add -fno-PIE scripts/has-stack-protector: add -fno-PIE Sebastian Frias (1): genirq/generic_chip: Add irq_unmap callback Segher Boessenkool (1): powerpc: Convert cmp to cmpd in idle enter sequence Sergei Shtylyov (1): platform: don't return 0 from platform_get_irq[_byname]() on error Shao Fu (1): rtlwifi: Update regulatory database Song Hongyan (1): iio: hid-sensors: Increase the precision of scale to fix wrong reading interpretation. Stefan Richter (1): firewire: net: fix fragmented datagram_size off-by-one Stefan Tauner (1): USB: serial: ftdi_sio: add support for Infineon TriBoard TC2X7 Steffen Maier (10): zfcp: fix fc_host port_type with NPIV zfcp: fix ELS/GS request&response length for hardware data router zfcp: close window with unblocked rport during rport gone zfcp: retain trace level for SCSI and HBA FSF response records zfcp: restore: Dont use 0 to indicate invalid LUN in rec trace zfcp: trace on request for open and close of WKA port zfcp: restore tracing of handle for port and LUN with HBA records zfcp: fix D_ID field with actual value on tracing SAN responses zfcp: fix payload trace length for SAN request&response zfcp: trace full payload of all SAN records (req,resp,iels) Stephen Suryaputra Lin (1): ipv4: use new_gw for redirect neigh lookup Steve French (6): Display number of credits available Set previous session id correctly on SMB3 reconnect SMB3: GUIDs should be constructed as random but valid uuids Clarify locking of cifs file and tcon structures and make more granular Do not send SMB3 SET_INFO request if nothing is changing Cleanup missing frees on some ioctls Sumit Saxena (1): scsi: megaraid_sas: fix macro MEGASAS_IS_LOGICAL to avoid regression Sven Eckelmann (1): batman-adv: Check for alloc errors when preparing TT local data Taesoo Kim (1): jbd2: fix incorrect unlock on j_list_lock Takashi Iwai (5): ALSA: ali5451: Fix out-of-bound position reporting ALSA: hda - Fix surround output pins for ASRock B150M mobo ALSA: hda - Fix mic regression by ASRock mobo fixup xc2028: Fix use-after-free bug properly ALSA: pcm : Call kill_fasync() in stream lock Tariq Toukan (1): IB/uverbs: Fix leak of XRC target QPs Theodore Ts'o (1): ext4: sanity check the block and cluster size at mount time Thomas Gleixner (1): locking/rtmutex: Prevent dequeue vs. unlock race Thomas Huth (1): KVM: PPC: Book3s PR: Allow access to unprivileged MMCR2 register Tom St Denis (1): drm/radeon/si_dpm: Limit clocks on HD86xx part Trond Myklebust (1): NFSv4: Open state recovery must account for file permission changes Ulf Hansson (3): mmc: rtsx_usb_sdmmc: Avoid keeping the device runtime resumed when unused mmc: rtsx_usb_sdmmc: Handle runtime PM while changing the led memstick: rtsx_usb_ms: Manage runtime PM when accessing the device Ulrich Weber (1): netfilter: nf_conntrack_sip: extend request line validation Uwe Kleine-König (1): mfd: wm8350-i2c: Make sure the i2c regmap functions are compiled Vladimir Zapolskiy (1): i2c: core: fix NULL pointer dereference under race condition WANG Cong (2): ipv4: use the right lock for ping_group_range neigh: check error pointer instead of NULL for ipv4_neigh_lookup() Wei Fang (1): vfs,mm: fix a dead loop in truncate_inode_pages_range() Wei Yongjun (2): staging: rtl8188eu: fix missing unlock on error in rtw_resume_process() staging: rtl8188eu: fix double unlock error in rtw_resume_process() Will Deacon (2): arm64: debug: avoid resetting stepping state machine when TIF_SINGLESTEP arm64: KVM: Take S1 walks into account when determining S2 write faults Willem de Bruijn (3): packet: on direct_xmit, limit tso and csum to supported devices rose: limit sk_filter trim to payload dccp: limit sk_filter trim to payload Xin Long (1): sctp: do not return the transmit err back to sctp_sendmsg Zhou Chengming (1): sysctl: Drop reference added by grab_header in proc_sys_readdir gmail (1): ext4: release bh in make_indexed_dir murray foster (1): ASoC: cs4270: fix DAPM stream name mismatch tang.junhui (1): dm table: fix missing dm_put_target_type() in dm_table_add_target() wangguang (1): ext4: bugfix for mmaped pages in mpage_release_unused_pages() 추지호 (1): can: peak: fix bad memory access and free sequence