I'm announcing the release of the 3.16.84 kernel. All users of the 3.16 kernel series should upgrade. The updated 3.16.y git tree can be found at: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.16.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git The diff from 3.16.83 is attached to this message. Ben. ------------ Makefile | 2 +- arch/arm/boot/dts/sama5d3.dtsi | 26 ++-- arch/arm/boot/dts/sama5d3_can.dtsi | 4 +- arch/arm/boot/dts/sama5d3_tcb1.dtsi | 1 + arch/arm/boot/dts/sama5d3_uart.dtsi | 4 +- arch/arm/include/asm/kvm_emulate.h | 5 + arch/arm/include/asm/kvm_mmio.h | 2 + arch/arm/kvm/mmio.c | 6 + arch/arm/mach-tegra/sleep-tegra30.S | 11 ++ arch/arm64/include/asm/kvm_emulate.h | 5 + arch/arm64/include/asm/kvm_mmio.h | 6 +- arch/ia64/include/asm/io.h | 1 + arch/powerpc/Kconfig | 1 + arch/powerpc/kvm/book3s_hv.c | 4 +- arch/powerpc/kvm/book3s_pr.c | 4 +- arch/sparc/include/uapi/asm/ipcbuf.h | 22 ++-- arch/x86/kernel/cpu/tsx.c | 13 +- arch/x86/kvm/emulate.c | 12 +- arch/x86/kvm/i8259.c | 4 +- arch/x86/kvm/lapic.c | 14 +- arch/x86/kvm/vmx.c | 4 +- arch/x86/kvm/x86.c | 57 +++++++-- arch/x86/platform/efi/efi.c | 37 +++--- crypto/af_alg.c | 6 +- crypto/algapi.c | 22 +--- crypto/api.c | 3 +- crypto/internal.h | 1 - crypto/pcrypt.c | 4 +- drivers/crypto/picoxcell_crypto.c | 15 ++- drivers/firmware/efi/efi.c | 4 +- drivers/md/persistent-data/dm-space-map-common.c | 27 ++++ drivers/md/persistent-data/dm-space-map-common.h | 2 + drivers/md/persistent-data/dm-space-map-disk.c | 6 +- drivers/md/persistent-data/dm-space-map-metadata.c | 5 +- drivers/media/rc/iguanair.c | 15 +-- drivers/media/usb/uvc/uvc_driver.c | 12 ++ drivers/media/v4l2-core/videobuf-dma-sg.c | 5 +- drivers/mmc/host/mmc_spi.c | 11 +- drivers/net/bonding/bond_alb.c | 44 +++++-- drivers/net/ethernet/freescale/gianfar.c | 10 +- drivers/net/wireless/ath/ath9k/hif_usb.c | 2 +- drivers/net/wireless/brcm80211/brcmfmac/dhd_sdio.c | 3 + drivers/net/wireless/brcm80211/brcmfmac/usb.c | 3 +- drivers/net/wireless/iwlegacy/common.c | 2 +- drivers/net/wireless/orinoco/orinoco_usb.c | 4 +- drivers/net/wireless/rsi/rsi_91x_usb.c | 12 +- drivers/net/wireless/zd1211rw/zd_usb.c | 2 +- drivers/of/Kconfig | 4 + drivers/of/address.c | 6 +- drivers/pci/setup-bus.c | 20 ++- drivers/power/sbs-battery.c | 2 +- drivers/rtc/rtc-hym8563.c | 2 +- drivers/scsi/qla2xxx/qla_mbx.c | 3 +- drivers/spi/spi-dw.c | 14 +- drivers/spi/spi-dw.h | 1 + drivers/staging/wlan-ng/prism2mgmt.c | 2 +- drivers/usb/dwc3/core.c | 3 + drivers/usb/gadget/f_ecm.c | 16 ++- drivers/usb/gadget/f_ncm.c | 17 ++- drivers/usb/serial/ir-usb.c | 136 +++++++++++++++----- drivers/video/fbdev/pxa168fb.c | 6 +- fs/btrfs/ctree.c | 8 +- fs/btrfs/ctree.h | 6 +- fs/btrfs/delayed-ref.c | 8 +- fs/btrfs/disk-io.c | 1 - fs/btrfs/tests/btrfs-tests.c | 1 - fs/cifs/cifsglob.h | 1 + fs/cifs/smb2pdu.c | 10 +- fs/cifs/smb2transport.c | 2 + fs/cifs/transport.c | 4 + fs/jbd2/checkpoint.c | 2 +- fs/jbd2/commit.c | 4 +- fs/jbd2/journal.c | 21 ++- fs/namespace.c | 2 +- fs/nfs/Kconfig | 2 +- fs/nfs/dir.c | 104 ++++++--------- fs/pnode.c | 9 +- fs/reiserfs/super.c | 4 +- fs/ubifs/file.c | 5 +- include/linux/padata.h | 13 +- include/linux/usb/irda.h | 13 +- kernel/padata.c | 142 ++++++++------------- kernel/time/clocksource.c | 11 +- kernel/trace/trace_stat.c | 31 +++-- mm/mempolicy.c | 6 +- net/ipv4/tcp.c | 1 + net/sched/cls_rsvp.h | 6 +- net/sched/ematch.c | 3 + net/sunrpc/auth_gss/svcauth_gss.c | 4 + scripts/kconfig/confdata.c | 2 +- sound/drivers/dummy.c | 2 +- sound/sh/aica.c | 4 +- virt/kvm/ioapic.c | 15 ++- virt/kvm/kvm_main.c | 12 +- 94 files changed, 713 insertions(+), 443 deletions(-) Al Viro (1): propagate_one(): mnt_set_mountpoint() needs mount_lock Alexandre Belloni (2): ARM: dts: at91: sama5d3: fix maximum peripheral clock rates ARM: dts: at91: sama5d3: define clock rate range for tcb1 Ard Biesheuvel (1): efi/x86: Map the entire EFI vendor string before copying it Arnd Bergmann (2): sparc32: fix struct ipc64_perm type definition x86: kvm: avoid unused variable warning Ben Hutchings (1): Linux 3.16.84 Bin Liu (1): usb: dwc3: turn off VBUS when leaving host mode Bryan O'Donoghue (2): usb: gadget: f_ncm: Use atomic_t to track in-flight request usb: gadget: f_ecm: Use atomic_t to track in-flight request Chen Yucong (1): kvm: x86: use macros to compute bank MSRs Christoffer Dall (1): KVM: arm64: Only sign-extend MMIO up to register width Christophe JAILLET (1): pxa168fb: Fix the function used to release some memory in an error handling path Chuhong Yuan (1): crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill Colin Ian King (2): staging: wlan-ng: ensure error return is actually returned iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop Dan Carpenter (3): brcmfmac: Fix use after free in brcmf_sdio_readframes() power: supply: sbs-battery: Fix a signedness bug in sbs_get_battery_capacity() mm/mempolicy.c: fix out of bounds write in mpol_parse_str() Daniel Jordan (3): padata: initialize pd->cpu with effective cpumask padata: purge get_cpu and reorder_via_wq from padata_do_serial padata: always acquire cpu_hotplug_lock before pinst->lock Daniel Kiper (2): arch/ia64: Define early_memunmap() efi: Use early_mem*() instead of early_io*() Eric Dumazet (4): net_sched: ematch: reject invalid TCF_EM_SIMPLE tcp: clear tp->total_retrans in tcp_disconnect() cls_rsvp: fix rsvp_policy bonding/alb: properly access headers in bond_alb_xmit() Fabian Frederick (1): nfs: use kmap/kunmap directly Filipe Manana (1): Btrfs: fix race between adding and putting tree mod seq elements and nodes Geert Uytterhoeven (1): nfs: NFS_SWAP should depend on SWAP Guenter Roeck (1): brcmfmac: abort and release host after error Herbert Xu (7): padata: Replace delayed timer with immediate workqueue in padata_reorder padata: Remove broken queue flushing crypto: pcrypt - Fix user-after-free on module unload crypto: pcrypt - Do not clear MAY_SLEEP flag in original request crypto: af_alg - Use bh_lock_sock in sk_destruct crypto: api - Check spawn->alg under lock in crypto_drop_spawn crypto: api - Fix race condition in crypto_spawn_alg Jan Kara (2): reiserfs: Fix memory leak of journal device string reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling Jason A. Donenfeld (2): padata: avoid race in reordering padata: get_next is never NULL Joe Thornber (1): dm space map common: fix to ensure new block isn't already in use Johan Hovold (10): ath9k: fix storage endpoint lookup rsi: fix use-after-free on failed probe and unbind brcmfmac: fix interface sanity check orinoco_usb: fix interface sanity check rsi_91x_usb: fix interface sanity check zd1211rw: fix storage endpoint lookup media: iguanair: fix endpoint sanity check USB: serial: ir-usb: add missing endpoint sanity check USB: serial: ir-usb: fix link-speed handling USB: serial: ir-usb: fix IrLAP framing John Hubbard (1): media/v4l2-core: set pages dirty upon releasing DMA buffers Kai Li (1): jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal Konstantin Khlebnikov (1): clocksource: Prevent double add_timer_on() for watchdog_timer Linus Walleij (1): mmc: spi: Toggle SPI polarity, do not hardcode it Logan Gunthorpe (1): PCI: Don't disable bridge BARs when assigning bus resources Luis Henriques (1): tracing: Fix tracing_stat return values in error handling paths Marios Pomonis (7): KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks Masahiro Yamada (1): kconfig: fix broken dependency in randconfig-generated .config Mathias Krause (3): padata: set cpu_index of unused CPUs to -1 padata: ensure the reorder timer callback runs on the correct CPU padata: ensure padata_do_serial() runs on the correct CPU Miaohe Lin (1): KVM: nVMX: vmread should not set rflags to specify success in case of #PF Michael Ellerman (1): of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc Navid Emamdoost (1): brcmfmac: Fix memory leak in brcmf_usbdev_qinit Oliver Neukum (1): media: iguanair: add sanity checks Paul Kocialkowski (1): rtc: hym8563: Return -EINVAL if the time is known to be invalid Pawan Gupta (1): x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR Piotr Krysiuk (1): fs/namespace.c: fix mountpoint reference counter race Quinn Tran (1): scsi: qla2xxx: Fix mtcp dump collection failure Roberto Bergantinos Corpas (1): sunrpc: expiry_time should be seconds not timeval Ronnie Sahlberg (1): cifs: fail i/o on soft mounts if sessionsetup errors out Sean Christopherson (6): KVM: x86: Don't let userspace set host-reserved cr4 bits KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails KVM: PPC: Book3S PR: Free shared page if mmu initialization fails KVM: x86: Free wbinvd_dirty_mask if vCPU creation fails KVM: Check for a bad hva before dropping into the ghc slow path Stephen Warren (1): ARM: tegra: Enable PLLP bypass during Tegra124 LP1 Steven Rostedt (VMware) (1): tracing: Fix very unlikely race of registering two stat tracers Takashi Iwai (2): ALSA: sh: Fix compile warning wrt const ALSA: dummy: Fix PCM format loop in proc output Tobias Klauser (1): padata: Remove unused but set variables Trond Myklebust (2): NFS: Fix memory leaks and corruption in readdir NFS: Directory page cache pages need to be locked when read Vincent Whitchurch (1): CIFS: Fix task struct use-after-free on reconnect Vladimir Oltean (1): gianfar: Fix TX timestamping with a stacked DSA driver Will Deacon (1): media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors Zhihao Cheng (1): ubifs: Fix deadlock in concurrent bulk-read and writepage wuxu.wu (1): spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls zhangyi (F) (2): jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record ext4, jbd2: ensure panic when aborting with zero errno