I'm announcing the release of the 3.16.42 kernel. All users of the 3.16 kernel series should upgrade. The updated 3.16.y git tree can be found at: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.16.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git The diff from 3.16.41 is attached to this message. Ben. ------------ .../devicetree/bindings/clock/imx31-clock.txt | 2 +- Documentation/virtual/kvm/api.txt | 1 + MAINTAINERS | 4 +- Makefile | 2 +- arch/arc/kernel/unaligned.c | 3 +- arch/arm/boot/dts/da850-evm.dts | 1 + arch/arm/boot/dts/imx31.dtsi | 18 +- arch/arm/boot/dts/imx6q-cm-fx6.dts | 1 - arch/arm/include/asm/cputype.h | 3 + arch/arm/kernel/hw_breakpoint.c | 16 ++ arch/arm/kernel/ptrace.c | 2 +- arch/arm/mach-davinci/da850.c | 12 +- arch/arm/mach-ux500/pm.c | 4 +- arch/arm/mach-zynq/common.c | 2 +- arch/arm/xen/enlighten.c | 3 +- arch/arm64/crypto/aes-ce-ccm-core.S | 53 +++--- arch/arm64/crypto/aes-ce.S | 1 + arch/arm64/crypto/aes-modes.S | 91 +++++----- arch/arm64/crypto/aes-neon.S | 25 +-- arch/arm64/crypto/ghash-ce-core.S | 6 +- arch/arm64/crypto/sha1-ce-core.S | 4 +- arch/arm64/crypto/sha2-ce-core.S | 4 +- arch/arm64/include/uapi/asm/ptrace.h | 1 + arch/arm64/kernel/entry.S | 2 +- arch/arm64/kernel/ptrace.c | 11 +- arch/arm64/kernel/traps.c | 28 ++- arch/cris/boot/rescue/Makefile | 8 + arch/mips/kvm/kvm_mips.c | 4 +- arch/parisc/include/asm/bitops.h | 8 +- arch/parisc/include/uapi/asm/bitsperlong.h | 2 - arch/parisc/include/uapi/asm/swab.h | 5 +- arch/powerpc/boot/ps3-head.S | 5 - arch/powerpc/boot/ps3.c | 8 +- arch/powerpc/boot/wrapper | 24 ++- arch/powerpc/include/asm/kvm_host.h | 1 + arch/powerpc/include/asm/ppc-opcode.h | 10 +- arch/powerpc/include/uapi/asm/kvm.h | 1 + arch/powerpc/kernel/asm-offsets.c | 1 + arch/powerpc/kernel/ibmebus.c | 16 +- arch/powerpc/kernel/misc_32.S | 2 +- arch/powerpc/kernel/prom_init.c | 3 + arch/powerpc/kernel/ptrace.c | 7 + arch/powerpc/kvm/book3s_hv.c | 6 + arch/powerpc/kvm/book3s_hv_rmhandlers.S | 4 + arch/sparc/kernel/leon_kernel.c | 56 +++--- arch/tile/kernel/ptrace.c | 2 +- arch/x86/boot/string.c | 1 + arch/x86/boot/string.h | 9 + arch/x86/kernel/cpu/common.c | 2 +- arch/x86/kernel/entry_32.S | 4 +- arch/x86/kvm/lapic.c | 6 + arch/x86/kvm/lapic.h | 1 + arch/x86/kvm/vmx.c | 10 +- arch/x86/kvm/x86.c | 12 +- arch/x86/pci/acpi.c | 10 ++ crypto/algapi.c | 1 + drivers/ata/sata_mv.c | 3 + drivers/base/dma-mapping.c | 4 +- drivers/base/regmap/regcache-lzo.c | 8 +- drivers/block/nbd.c | 34 ++-- drivers/bus/vexpress-config.c | 7 +- drivers/clk/clk-wm831x.c | 2 +- drivers/clk/shmobile/clk-mstp.c | 27 ++- drivers/clocksource/exynos_mct.c | 5 + drivers/crypto/caam/caamalg.c | 4 +- drivers/devfreq/devfreq.c | 19 ++- drivers/gpu/drm/ast/ast_main.c | 7 +- drivers/gpu/drm/gma500/psb_drv.c | 3 + drivers/gpu/drm/i915/intel_crt.c | 9 +- drivers/gpu/drm/i915/intel_display.c | 4 +- drivers/gpu/drm/i915/intel_pm.c | 11 +- drivers/gpu/drm/nouveau/dispnv04/hw.c | 3 +- drivers/gpu/drm/radeon/radeon_cursor.c | 56 ++++-- drivers/gpu/drm/radeon/radeon_mode.h | 1 + drivers/gpu/drm/radeon/si_dpm.c | 14 +- drivers/hid/hid-cypress.c | 3 + drivers/hwmon/ds620.c | 2 +- drivers/hwmon/g762.c | 11 +- drivers/i2c/i2c-dev.c | 2 +- drivers/i2c/muxes/i2c-mux-pca954x.c | 5 +- drivers/iio/humidity/dht11.c | 6 +- drivers/infiniband/core/mad.c | 2 +- drivers/infiniband/core/multicast.c | 7 +- drivers/infiniband/core/uverbs_cmd.c | 1 - drivers/infiniband/core/verbs.c | 4 +- drivers/infiniband/hw/cxgb4/device.c | 1 + drivers/infiniband/hw/mlx4/ah.c | 6 +- drivers/infiniband/hw/mlx4/main.c | 30 ++-- drivers/infiniband/hw/mlx4/qp.c | 3 +- drivers/infiniband/hw/mlx5/main.c | 1 + drivers/infiniband/hw/mlx5/mr.c | 28 +++ drivers/infiniband/ulp/ipoib/ipoib_cm.c | 2 - drivers/infiniband/ulp/ipoib/ipoib_multicast.c | 7 +- drivers/input/serio/i8042-x86ia64io.h | 6 + drivers/iommu/amd_iommu.c | 2 +- drivers/isdn/hardware/eicon/message.c | 3 +- drivers/md/dm-crypt.c | 7 +- drivers/md/dm.c | 10 +- drivers/md/md.c | 2 +- drivers/md/persistent-data/dm-space-map-metadata.c | 14 +- drivers/md/raid5.c | 9 + drivers/media/i2c/Kconfig | 1 + drivers/media/platform/davinci/vpfe_capture.c | 1 + drivers/media/rc/ite-cir.c | 2 + drivers/media/usb/siano/smsusb.c | 18 +- drivers/misc/mei/client.c | 20 ++- drivers/mmc/core/mmc.c | 4 +- drivers/mmc/host/mxs-mmc.c | 6 +- drivers/mmc/host/sdhci.c | 23 ++- drivers/mtd/nand/Kconfig | 2 +- drivers/net/bonding/bond_netlink.c | 6 +- drivers/net/can/c_can/c_can_pci.c | 1 + drivers/net/can/ti_hecc.c | 16 +- drivers/net/ethernet/atheros/alx/main.c | 7 +- drivers/net/ethernet/broadcom/bcmsysport.c | 43 +++-- drivers/net/ethernet/cisco/enic/enic_main.c | 18 +- drivers/net/ethernet/emulex/benet/be_cmds.c | 2 +- drivers/net/ethernet/korina.c | 8 +- drivers/net/ethernet/marvell/sky2.c | 13 ++ drivers/net/ethernet/mellanox/mlx4/cq.c | 38 +++-- drivers/net/ethernet/mellanox/mlx4/en_rx.c | 13 +- drivers/net/ethernet/mellanox/mlx4/eq.c | 23 ++- drivers/net/ethernet/mellanox/mlx4/icm.c | 7 +- .../net/ethernet/mellanox/mlx4/resource_tracker.c | 11 +- drivers/net/ethernet/renesas/sh_eth.c | 6 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 20 ++- drivers/net/ethernet/xilinx/xilinx_emaclite.c | 126 +++++++------- drivers/net/hyperv/netvsc_drv.c | 4 + drivers/net/macvtap.c | 4 +- drivers/net/tun.c | 20 ++- drivers/net/usb/catc.c | 56 +++--- drivers/net/usb/cdc_ether.c | 8 + drivers/net/usb/cdc_ncm.c | 7 + drivers/net/usb/pegasus.c | 29 +++- drivers/net/usb/qmi_wwan.c | 7 + drivers/net/usb/r8152.c | 7 +- drivers/net/usb/rtl8150.c | 34 +++- drivers/net/vxlan.c | 8 +- drivers/net/xen-netfront.c | 9 +- drivers/pci/hotplug/rpadlpar_core.c | 10 +- drivers/pci/pci.c | 4 + drivers/platform/x86/intel_mid_powerbtn.c | 2 +- drivers/regulator/stw481x-vmmc.c | 3 +- drivers/s390/char/vmlogrdr.c | 2 +- drivers/s390/scsi/zfcp_dbf.c | 17 +- drivers/s390/scsi/zfcp_dbf.h | 41 ++++- drivers/s390/scsi/zfcp_erp.c | 61 ++++++- drivers/s390/scsi/zfcp_ext.h | 4 +- drivers/s390/scsi/zfcp_fsf.c | 8 +- drivers/s390/scsi/zfcp_fsf.h | 3 +- drivers/s390/scsi/zfcp_reqlist.h | 30 +++- drivers/s390/scsi/zfcp_scsi.c | 61 ++++++- drivers/scsi/megaraid/megaraid_sas_fusion.c | 1 + drivers/scsi/mvsas/mv_94xx.c | 2 +- drivers/scsi/qla2xxx/qla_os.c | 16 +- drivers/scsi/scsi_sysfs.c | 4 - drivers/scsi/sg.c | 4 + drivers/ssb/pci.c | 1 + drivers/staging/iio/adc/ad7606_core.c | 2 +- drivers/staging/media/davinci_vpfe/vpfe_video.c | 2 +- drivers/target/iscsi/iscsi_target_tpg.c | 1 - drivers/target/target_core_sbc.c | 8 +- drivers/target/target_core_transport.c | 17 +- drivers/target/target_core_xcopy.c | 2 +- drivers/thermal/thermal_hwmon.c | 2 +- drivers/tty/n_hdlc.c | 143 ++++++++-------- drivers/tty/serial/atmel_serial.c | 11 +- drivers/tty/sysrq.c | 4 +- drivers/usb/class/cdc-acm.c | 1 + drivers/usb/core/config.c | 10 ++ drivers/usb/core/hub.c | 134 ++++++--------- drivers/usb/core/quirks.c | 4 + drivers/usb/dwc3/ep0.c | 37 ++-- drivers/usb/dwc3/gadget.c | 20 ++- drivers/usb/gadget/composite.c | 23 ++- drivers/usb/gadget/dummy_hcd.c | 6 +- drivers/usb/gadget/inode.c | 17 +- drivers/usb/gadget/uvc_video.c | 2 +- drivers/usb/host/uhci-pci.c | 4 + drivers/usb/host/xhci-mem.c | 42 ++++- drivers/usb/host/xhci-pci.c | 3 +- drivers/usb/host/xhci-ring.c | 39 +++-- drivers/usb/host/xhci.c | 13 -- drivers/usb/musb/musbhsdma.h | 2 +- drivers/usb/phy/phy-am335x-control.c | 2 + drivers/usb/serial/ch341.c | 187 +++++++++++++-------- drivers/usb/serial/cyberjack.c | 10 ++ drivers/usb/serial/garmin_gps.c | 1 + drivers/usb/serial/io_edgeport.c | 5 + drivers/usb/serial/io_ti.c | 14 +- drivers/usb/serial/iuu_phoenix.c | 11 ++ drivers/usb/serial/keyspan_pda.c | 14 ++ drivers/usb/serial/kl5kusb105.c | 35 +++- drivers/usb/serial/kobil_sct.c | 12 ++ drivers/usb/serial/mos7720.c | 51 +++--- drivers/usb/serial/mos7840.c | 16 +- drivers/usb/serial/omninet.c | 13 ++ drivers/usb/serial/option.c | 8 + drivers/usb/serial/oti6858.c | 16 ++ drivers/usb/serial/pl2303.c | 9 + drivers/usb/serial/pl2303.h | 1 + drivers/usb/serial/qcserial.c | 1 + drivers/usb/serial/quatech2.c | 4 - drivers/usb/serial/spcp8x5.c | 14 ++ drivers/usb/serial/ti_usb_3410_5052.c | 7 + drivers/usb/storage/unusual_devs.h | 7 + drivers/vme/bridges/vme_ca91cx42.c | 2 +- drivers/xen/gntdev.c | 2 +- fs/block_dev.c | 9 +- fs/btrfs/async-thread.c | 14 ++ fs/btrfs/async-thread.h | 1 + fs/btrfs/delayed-inode.c | 15 +- fs/btrfs/extent-tree.c | 5 +- fs/btrfs/ioctl.c | 6 +- fs/btrfs/tree-log.c | 3 +- fs/ceph/mds_client.c | 9 +- fs/cifs/cifsglob.h | 3 + fs/cifs/cifsproto.h | 3 + fs/cifs/connect.c | 34 +++- fs/cifs/smb2file.c | 2 +- fs/cifs/smb2pdu.c | 77 ++++++--- fs/cifs/smb2proto.h | 1 + fs/exec.c | 10 +- fs/ext4/inline.c | 4 +- fs/ext4/inode.c | 6 + fs/ext4/mballoc.c | 4 +- fs/ext4/super.c | 64 ++++--- fs/f2fs/debug.c | 1 + fs/nfs/dir.c | 15 +- fs/nfs/file.c | 2 +- fs/nfs/filelayout/filelayoutdev.c | 3 +- fs/nfs/nfs4state.c | 1 + fs/notify/inode_mark.c | 46 +---- fs/ocfs2/dlmglue.c | 10 ++ fs/ocfs2/stackglue.c | 6 + fs/ocfs2/stackglue.h | 3 + fs/splice.c | 1 + fs/ubifs/tnc.c | 25 ++- fs/xfs/xfs_bmap_util.c | 7 +- fs/xfs/xfs_log_recover.c | 1 + include/linux/can/core.h | 7 +- include/linux/cpu.h | 15 +- include/linux/jump_label_ratelimit.h | 5 + include/linux/netdevice.h | 9 +- include/linux/nfs4.h | 3 +- include/linux/sunrpc/clnt.h | 1 + include/linux/tcp.h | 7 +- include/net/cfg80211.h | 11 ++ include/net/cipso_ipv4.h | 4 + include/net/netfilter/nf_log.h | 2 + include/net/sock.h | 17 +- include/uapi/linux/usb/ch9.h | 19 +++ ipc/shm.c | 13 +- kernel/cpu.c | 13 +- kernel/events/core.c | 42 ++--- kernel/futex.c | 2 +- kernel/jump_label.c | 7 + kernel/printk/printk.c | 2 +- kernel/sched/cputime.c | 3 + kernel/sysctl.c | 1 + kernel/trace/trace_functions_graph.c | 17 +- lib/vsprintf.c | 2 +- mm/filemap.c | 5 + mm/huge_memory.c | 19 ++- mm/hugetlb.c | 37 +++- net/bridge/br_ioctl.c | 5 +- net/can/af_can.c | 12 +- net/can/af_can.h | 3 +- net/can/bcm.c | 27 ++- net/can/gw.c | 2 +- net/can/raw.c | 4 +- net/ceph/messenger.c | 13 ++ net/core/dev.c | 109 ++++++------ net/core/drop_monitor.c | 39 ++++- net/core/sock.c | 16 +- net/dccp/ipv4.c | 26 +-- net/dccp/ipv6.c | 16 +- net/dccp/proto.c | 4 + net/decnet/dn_route.c | 9 +- net/ipv4/cipso_ipv4.c | 4 + net/ipv4/igmp.c | 55 ++++-- net/ipv4/ipmr.c | 4 +- net/ipv4/netfilter/ipt_rpfilter.c | 8 +- net/ipv4/ping.c | 2 + net/ipv4/route.c | 12 ++ net/ipv4/tcp_fastopen.c | 3 +- net/ipv4/tcp_output.c | 21 ++- net/ipv4/udp.c | 2 +- net/ipv6/addrconf.c | 4 +- net/ipv6/ip6_gre.c | 3 + net/ipv6/ip6_offload.c | 1 + net/ipv6/ip6_output.c | 11 +- net/ipv6/ip6_tunnel.c | 49 ++++-- net/ipv6/ip6mr.c | 1 + net/ipv6/mcast.c | 50 +++--- net/ipv6/netfilter/ip6t_rpfilter.c | 8 +- net/ipv6/raw.c | 7 +- net/ipv6/sit.c | 5 +- net/ipv6/udp.c | 2 +- net/irda/irqueue.c | 34 ++-- net/l2tp/l2tp_core.h | 1 + net/l2tp/l2tp_ip.c | 27 ++- net/l2tp/l2tp_ip6.c | 2 +- net/llc/llc_conn.c | 3 + net/llc/llc_sap.c | 3 + net/mac80211/mesh.c | 2 +- net/mac80211/mlme.c | 17 +- net/netfilter/nf_log.c | 1 - net/netfilter/nft_log.c | 3 +- net/packet/af_packet.c | 45 +++-- net/sched/act_pedit.c | 24 ++- net/sched/cls_api.c | 4 +- net/sched/em_meta.c | 9 +- net/sched/sch_dsmark.c | 3 + net/sched/sch_htb.c | 5 +- net/sched/sch_netem.c | 61 ++++++- net/sctp/socket.c | 19 ++- net/socket.c | 19 ++- net/sunrpc/auth_gss/gss_rpc_xdr.c | 2 +- net/sunrpc/auth_gss/svcauth_gss.c | 2 +- net/sunrpc/clnt.c | 5 + net/sunrpc/sunrpc_syms.c | 1 + net/vmw_vsock/af_vsock.c | 21 +-- net/wireless/core.h | 1 + net/wireless/mlme.c | 12 ++ net/wireless/sme.c | 14 ++ scripts/kconfig/nconf.gui.c | 15 +- sound/core/seq/seq_memory.c | 9 +- sound/core/seq/seq_queue.c | 33 ++-- sound/pci/hda/patch_conexant.c | 28 +++ sound/pci/hda/patch_hdmi.c | 1 + sound/pci/hda/patch_realtek.c | 2 + sound/usb/card.c | 1 - sound/usb/hiface/pcm.c | 2 + sound/usb/mixer.c | 3 +- tools/perf/builtin-trace.c | 4 +- tools/perf/util/trace-event-scripting.c | 6 +- tools/testing/selftests/net/run_netsocktests | 2 +- .../powerpc/pmu/ebb/pmc56_overflow_test.c | 2 +- 339 files changed, 3027 insertions(+), 1429 deletions(-) Adrian Hunter (1): mmc: sdhci: Fix recovery from tuning timeout Aidan Thornton (2): USB: serial: ch341: add register and USB request definitions USB: serial: ch341: reinitialize chip on reconfiguration Akinobu Mita (1): sysrq: attach sysrq handler correctly for 32-bit kernel Al Viro (2): nfs_write_end(): fix handling of short copies Fix missing sanity check in /dev/sg Alan Stern (7): PCI: Check for PME in targeted sleep state USB: UHCI: report non-PME wakeup signalling for Intel hardware USB: dummy-hcd: fix bug in stop_activity (handle ep0) USB: gadgetfs: fix unbounded memory allocation bug USB: gadgetfs: fix use-after-free bug USB: gadgetfs: fix checks of wTotalLength in config descriptors USB: fix problems with duplicate endpoint addresses Aleksa Sarai (1): fs: exec: apply CLOEXEC before changing dumpable task flags Aleksander Morgado (1): USB: serial: qcserial: add Dell DW5570 QDL Alex Deucher (2): drm/radeon: add additional pci revision to dpm workaround drm/radeon: drop verde dpm quirks Alex Porosanu (1): crypto: caam - fix AEAD givenc descriptors Alexander Popov (1): tty: n_hdlc: get rid of racy n_hdlc.tbuf Alexander Usyskin (1): mei: move write cb to completion on credentials failures Alexey Kodanev (1): tcp: initialize max window for a new fastopen socket Amir Vadai (1): net/sched: pedit: make sure that offset is valid Ander Conselvan de Oliveira (1): drm/i915: Don't leak edid in intel_crt_detect_ddc() Andrew Collins (1): net: Add netdev all_adj_list refcnt propagation to fix panic Andrey Ryabinin (1): drm/i915: fix use-after-free in page_flip_completed() Andy Shevchenko (1): platform/x86: intel_mid_powerbtn: Set IRQ_ONESHOT Anoob Soman (2): packet: call fanout_release, while UNREGISTERING a netdev packet: Do not call fanout_release from atomic contexts Anssi Hannula (3): mmc: core: fix multi-bit bus width without high-speed mode net: xilinx_emaclite: fix receive buffer overflow net: xilinx_emaclite: fix freezes due to unordered I/O Anton Blanchard (1): powerpc: Ignore reserved field in DCSR and PVR reads and writes Ard Biesheuvel (7): crypto: arm64/ghash-ce - fix for big endian crypto: arm64/sha1-ce - fix for big endian crypto: arm64/sha2-ce - fix for big endian crypto: arm64/aes-ccm-ce: fix for big endian crypto: arm64/aes-neon - fix for big endian crypto: arm64/aes-xts-ce: fix for big endian crypto: arm64/aes-blk - honour iv_out requirement in CBC and CTR modes Arnaldo Carvalho de Melo (2): perf trace: Use the syscall raw_syscalls:sys_enter timestamp perf scripting: Avoid leaking the scripting_context variable Arnd Bergmann (5): scsi: mvsas: fix command_active typo DaVinci-VPFE-Capture: fix error handling s5k4ecgx: select CRC32 helper ARM: ux500: fix prcmu_is_cpu_in_wfi() calculation ISDN: eicon: silence misleading array-bounds warning Arvind Yadav (1): ata: sata_mv:- Handle return value of devm_ioremap. Augusto Mecking Caringi (1): vme: Fix wrong pointer utilization in ca91cx42_slave_get Axel Lin (1): PM / devfreq: Add proper locking around list_del() Baolin Wang (1): usb: host: xhci: Fix possible wild pointer when handling abort command Bart Van Assche (4): dm rq: fix a race condition in rq_completed() IB/mad: Fix an array index check IPoIB: Avoid reading an uninitialized member variable IB/multicast: Check ib_find_pkey() return value Bartosz Golaszewski (1): ARM: davinci: da850: don't add emac clock to lookup table twice Ben Hutchings (8): kconfig/nconf: Fix hang when editing symbol with a long prompt pegasus: Use heap buffers for all register access rtl8150: Use heap buffers for all register access catc: Combine failure cleanup code in catc_probe() catc: Use heap buffer for memory size test net/sock: Add sock_efree() function Revert "KVM: x86: expose MSR_TSC_AUX to userspace" Linux 3.16.42 Beniamino Galvani (1): bonding: set carrier off for devices created through netlink Benjamin Block (1): scsi: zfcp: fix use-after-"free" in FC ingress path after TMF Benjamin Marzinski (1): dm space map metadata: fix 'struct sm_metadata' leak on failed create Benjamin Poirier (1): mlx4: Invoke softirqs after napi_reschedule Bjorn Helgaas (1): x86/PCI: Ignore _CRS on Supermicro X8DTH-i/6/iF/6F Bjørn Mork (3): USB: serial: option: add device ID for HP lt2523 (Novatel E371) cdc_ncm: workaround for EM7455 "silent" data interface qmi_wwan/cdc_ether: add device ID for HP lt2523 (Novatel E371) WWAN card Boris Ostrovsky (2): xen/gntdev: Use VM_MIXEDMAP instead of VM_IO to avoid NUMA balancing xen-netfront: Delete rx_refill_timer in xennet_disconnect_backend() Chandan Rajendra (2): ext4: fix mballoc breakage with 64k block size ext4: fix stack memory corruption with 64k block size Chanwoo Choi (1): PM / devfreq: Fix the bug of devfreq_add_device when governor is NULL Chris Brandt (1): clk: renesas: mstp: Support 8-bit registers for r7s72100 Chris Friesen (1): route: do not cache fib route info on local routes with oif Christopher Spinrath (1): ARM: dts: imx6q-cm-fx6: fix fec pinctrl Chuck Lever (2): nfs: Don't increment lock sequence ID after NFS4ERR_MOVED nfs: Fix "Don't increment lock sequence ID after NFS4ERR_MOVED" Con Kolivas (1): ALSA: usb-audio: Add QuickCam Communicate Deluxe/S7500 to volume_control_quirks Dan Carpenter (6): usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL staging: media: davinci_vpfe: unlock on error in vpfe_reqbufs() ext4: return -ENOMEM instead of success sparc: leon: Fix a retry loop in leon_init_timers() target/iscsi: Fix double free in lio_target_tiqn_addtpg() ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim() Daniel Borkmann (1): net, sched: fix soft lockup in tc_classify Daniel Dressler (1): Btrfs: delayed-inode: replace root args iff only fs_info used Daniele Palmas (1): USB: serial: option: add support for Telit LE922A PIDs 0x1040, 0x1041 Darren Stevens (1): powerpc: Add missing error check to prom_find_boot_cpu() Darrick J. Wong (2): ext4: reject inodes with negative size xfs: update MAINTAINERS Dave Jones (1): ipv6: handle -EFAULT from skb_copy_bits Dave Martin (6): tile/ptrace: Preserve previous registers for short regset write arm64/ptrace: Preserve previous registers for short regset write arm64/ptrace: Avoid uninitialised struct padding in fpr_set() arm64/ptrace: Reject attempts to set incomplete hardware breakpoint fields powerpc/ptrace: Preserve previous fprs/vsrs on short regset write ARM: 8643/3: arm/ptrace: Preserve previous registers for short regset write David Henningsson (1): ALSA: hda - Add inverted internal mic for Asus Aspire 4830T David Matlack (2): jump_labels: API for flushing deferred jump label updates KVM: x86: flush pending lapic jump label updates on module unload David S. Miller (2): irda: Fix lockdep annotations in hashbin_delete(). decnet: Do not build routes to devices without decnet private data. Davidlohr Bueso (1): ipc/shm: Fix shmat mmap nil-page protection Douglas Caetano dos Santos (1): tcp: fix wrong checksum calculation on MTU probing Einar Jón (1): can: c_can_pci: fix null-pointer-deref in c_can_start() - set device pointer Eli Cohen (1): IB/mlx5: Wait for all async command completions to complete Eran Ben Elisha (1): IB/mlx4: When no DMFS for IPoIB, don't allow NET_IF QPs Eric Dumazet (22): gro: use min_t() in skb_gro_reset_offset() net: fix harmonize_features() vs NETIF_F_HIGHDMA ip6_tunnel: must reload ipv6h in ip6ip6_tnl_xmit() sysctl: fix proc_doulongvec_ms_jiffies_minmax() net: use a work queue to defer net_disable_timestamp() work netlabel: out of bound access in cipso_v4_validate() l2tp: do not use udp_ioctl() net/llc: avoid BUG_ON() in skb_orphan() packet: fix races in fanout_add() net: fix sk_mem_reclaim_partial() tcp: fix overflow in __tcp_retransmit_skb() net: avoid sk_forward_alloc overflows net: clear sk_err_soft in sk_clone_lock() net: mangle zero checksum in skb_checksum_help() dccp: do not send reset to already closed sockets dccp: fix out of bound access in dccp_v4_err() ipv6: dccp: fix out of bound access in dccp_v6_err() ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped net/dccp: fix use-after-free in dccp_invalid_packet can: Fix kernel panic at security_sock_rcv_skb ipv6: fix ip6_tnl_parse_tlv_enc_lim() tcp: fix 0 divide in __tcp_select_window() Eric Ren (1): ocfs2: fix crash caused by stale lvb with fsdlm plugin Eric Sandeen (2): xfs: fix up xfs_swap_extent_forks inline extent handling xfs: set AGI buffer type in xlog_recover_clear_agi_bucket Eugenia Emantayev (1): net/mlx4_en: Fix bad WQE issue Eva Rachel Retuya (1): staging: iio: ad7606: fix improper setting of oversampling pins Fabien Parent (1): ARM: dts: da850-evm: fix read access to SPI flash Felipe Balbi (7): usb: gadget: composite: correctly initialize ep->maxpacket usb: add helper to extract bits 12:11 of wMaxPacketSize usb: gadget: composite: always set ep->mult to a sensible value usb: dwc3: gadget: set PCM1 field of isochronous-first TRBs usb: dwc3: ep0: add dwc3_ep0_prepare_one_trb() usb: dwc3: ep0: explicitly call dwc3_ep0_prepare_one_trb() usb: dwc3: gadget: always unmap EP0 requests Feng Tang (1): net: alx: Work around the DMA RX overflow issue Florian Fainelli (6): drivers: base: dma-mapping: Fix typo in dmam_alloc_non_coherent comments net: korina: Fix NAPI versus resources freeing net: stmmac: Fix race between stmmac_drv_probe and stmmac_open net: stmmac: Fix error path after register_netdev move net: systemport: Pad packet before inserting TSB net: systemport: Decouple flow control from __bcm_sysport_tx_reclaim Gabriel Krisman Bertazi (1): mmc: sdhci: Ignore unexpected CARD_INT interrupts Geert Uytterhoeven (1): usb: hub: Move hub_port_disable() to fix warning if PM is disabled Geliang Tang (1): fs/notify/inode_mark.c: use list_next_entry in fsnotify_unmount_inodes Geoff Levand (1): powerpc/ps3: Fix system hang with GCC 5 builds Gerald Schaefer (1): s390/vmlogrdr: fix IUCV buffer allocation Giuseppe Lippolis (1): USB: serial: option: add dlink dwm-158 Govindarajulu Varadarajan (1): enic: set skb->hash type properly Greg Kroah-Hartman (2): usb: gadgetfs: restrict upper bound on device configuration size HID: hid-cypress: validate length of report Guenter Roeck (3): cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected hwmon: (ds620) Fix overflows seen when writing temperature limits hwmon: (g762) Fix overflows and crash seen when writing limit attributes Hangbin Liu (3): igmp: do not remove igmp souce list info when set link down mld: do not remove mld souce list info when set link down igmp, mld: Fix memory leak in igmpv3/mld_del_delrec() Hannes Frederic Sowa (1): udp: prevent skbs lingering in tunnel socket queues Hans de Goede (1): drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from vlv_init_display_clock_gating Hauke Mehrtens (1): mtd: nand: xway: disable module support Helge Deller (1): parisc: Don't use BITS_PER_LONG in userspace-exported swab.h header Herbert Xu (3): gro: Enter slow-path if there is no tailroom gro: Disable frag0 optimization on IPv6 ext headers tun: Fix TUN_PKT_STRIP setting Hiroshi Shimamoto (1): sched/cputime: Fix invalid gtime in proc Huang Rui (1): iommu/amd: Fix the left value check of cmd buffer Hui Wang (1): ALSA: hda - adding a new NV HDMI/DP codec ID in the driver Ian Campbell (1): VSOCK: do not disconnect socket when peer has shutdown SEND only Ilia Mirkin (1): drm/nouveau/nv1a,nv1f/disp: fix memory clock rate retrieval Ilya Dryomov (1): libceph: verify authorize reply on connect Ivan Vecera (1): be2net: fix status check in be_cmd_pmac_add() J. Bruce Fields (2): svcrpc: don't leak contexts on PROC_DESTROY svcrpc: fix oops in absence of krb5 module Jack Morgenstein (5): IB/mlx4: Fix out-of-range array index in destroy qp flow net/mlx4_core: Use-after-free causes a resource leak in flow-steering detach net/mlx4_core: Fix racy CQ (Completion Queue) free net/mlx4_core: Fix when to save some qp context flags for dynamic VST to VGT transitions net/mlx4_core: Eliminate warning messages for SRQ_LIMIT under SRIOV Jakub Sitnicki (1): ipv6: Skip XFRM lookup if dst_entry in socket cache is valid James Hogan (1): KVM: MIPS: Flush KVM entry code from icache globally Jan Kara (1): fsnotify: Fix possible use-after-free in inode iteration on umount Jeff Layton (1): ceph: fix bad endianness handling in parse_reply_info_extra Jeff Mahoney (3): btrfs: fix error handling when run_delayed_extent_op fails btrfs: fix locking when we put back a delayed ref that's too new btrfs: fix btrfs_compat_ioctl failures on non-compat ioctls Jens Axboe (1): nbd: fix use-after-free of rq/bio in the xmit path Jeremy Linton (1): net: sky2: Fix shutdown crash Jiri Slaby (2): net: sctp, forbid negative length TTY: n_hdlc, fix lockdep false positive Johan Hovold (34): powerpc/ibmebus: Fix device reference leaks in sysfs interface powerpc/ibmebus: Fix further device reference leaks powerpc/pci/rpadlpar: Fix device reference leaks USB: phy: am335x-control: fix device and of_node leaks USB: serial: kl5kusb105: fix open error path bus: vexpress-config: fix device reference leak USB: serial: cyberjack: fix NULL-deref at open USB: serial: garmin_gps: fix memory leak on failed URB submit USB: serial: io_edgeport: fix NULL-deref at open USB: serial: io_ti: fix NULL-deref at open USB: serial: io_ti: fix another NULL-deref at open USB: serial: iuu_phoenix: fix NULL-deref at open USB: serial: keyspan_pda: verify endpoints at probe USB: serial: kobil_sct: fix NULL-deref in write USB: serial: mos7720: fix NULL-deref at open USB: serial: mos7720: fix use-after-free on probe errors USB: serial: mos7720: fix parport use-after-free on probe errors USB: serial: mos7720: fix parallel probe USB: serial: mos7840: fix NULL-deref at open USB: serial: mos7840: fix misleading interrupt-URB comment USB: serial: omninet: fix NULL-derefs at open and disconnect USB: serial: oti6858: fix NULL-deref at open USB: serial: pl2303: fix NULL-deref at open USB: serial: quatech2: fix sleep-while-atomic in close USB: serial: spcp8x5: fix NULL-deref at open USB: serial: ti_usb_3410_5052: fix NULL-deref at open USB: ch341: remove redundant close from open error path USB: serial: ch341: fix initial modem-control state USB: serial: ch341: fix open and resume after B0 USB: serial: ch341: fix modem-control and B0 handling USB: serial: ch341: fix open error handling USB: serial: ch341: fix resume after reset USB: serial: ch341: fix baud rate and line-control handling USB: serial: ch341: fix control-message error handling Johannes Berg (1): cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts John Brooks (1): iio: dht11: Use usleep_range instead of msleep for start signal Joonyoung Shim (1): clocksource/exynos_mct: Clear interrupt when cpu is shut down Josef Bacik (1): nbd: only set MSG_MORE when we have more to send Julien Grall (1): arm/xen: Use alloc_percpu rather than __alloc_percpu Jussi Laako (1): ALSA: hiface: Fix M2Tech hiFace driver sampling rate change Kamal Heib (1): IB/IPoIB: Remove can't use GFP_NOIO warning Kashyap Desai (1): scsi: megaraid_sas: For SRIOV enabled firmware, ensure VF driver waits for 30secs before reset Kefeng Wang (1): ipv6: addrconf: Avoid addrconf_disable_change() using RCU read-side lock Keno Fischer (1): mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp Kinglong Mee (1): SUNRPC: cleanup ida information when removing sunrpc module Kirtika Ruchandani (1): regmap: cache: Remove unused 'blksize' variable Konstantin Khlebnikov (1): md/raid5: limit request size according to implementation limits Krzysztof Kozlowski (1): thermal: hwmon: Properly report critical temperature in sysfs Krzysztof Opasiak (1): usb: gadget: composite: Test get_alt() presence instead of set_alt() Kyle Roeschley (1): ARM: zynq: Reserve correct amount of non-DMA RAM Larry Finger (2): ssb: Fix error routine when fallback SPROM fails powerpc: Fix build warning on 32-bit PPC Leon Romanovsky (1): net/mlx4: Remove BUG_ON from ICM allocation routine Linus Walleij (1): regulator: stw481x-vmmc: fix ages old enable error Liping Zhang (2): netfilter: rpfilter: fix incorrect loopback packet judgment netfilter: nft_log: restrict the log prefix length to 127 Lu Baolu (2): usb: xhci: fix possible wild pointer usb: xhci: hold lock over xhci_abort_cmd_ring() Lukasz Odzioba (1): x86/cpu: Fix bootup crashes by sanitizing the argument of the 'clearcpuid=' command-line option Lukáš Lalinský (1): USB: Add quirk for WORLDE easykey.25 MIDI keyboard Madhavan Srinivasan (1): selftest/powerpc: Wrong PMC initialized in pmc56_overflow test Maor Gottlieb (3): IB/mlx5: Put non zero value in max_ah IB/mlx4: Set traffic class in AH IB/mlx4: Put non zero value in max_ah device attribute Marcel J.E. Mol (1): USB: serial: pl2303: add ATEN device ID Marcelo Ricardo Leitner (3): sctp: assign assoc_id earlier in __sctp_connect sctp: avoid BUG_ON on sctp_wait_for_sndbuf sctp: deny peeloff operation on asocs with threads sleeping on it Marcos Paulo de Souza (1): Input: i8042 - add Pegatron touchpad to noloop table Mark Bloch (1): IB/core: Save QP in ib_flow structure Mark Rutland (2): ARM: 8634/1: hw_breakpoint: blacklist Scorpion CPUs arm64: avoid returning from bad_mode Mathias Nyman (4): usb: hub: Fix auto-remount of safely removed or ejected USB-3 devices xhci: free xhci virtual devices with leaf nodes first xhci: Handle command completion and timeout race xhci: fix deadlock at host remove by running watchdog correctly Mauro Carvalho Chehab (1): siano: make it work again with CONFIG_VMAP_STACK Maxim Patlasov (1): btrfs: limit async_work allocation and worker func duration Maxime Jayat (1): net: socket: fix recvmmsg not returning error from sock_error Michal Hocko (2): hotplug: Make register and unregister notifier API symmetric mm, fs: check for fatal signals in do_generic_file_read() Michal Tesar (1): igmp: Make igmp group member RFC 3376 compliant Michel Dänzer (2): drm/radeon: Hide the HW cursor while it's out of bounds drm/radeon: Use mode h/vdisplay fields to hide out of bounds HW cursor Mike Kravetz (1): mm/hugetlb.c: fix reservation race when freeing surplus pages Miklos Szeredi (1): vfs: fix uninitialized flags in splice_to_pipe() Nathaniel Quillin (1): USB: cdc-acm: add device id for GW Instek AFG-125 Neil Horman (1): netem: Segment GSO packets on enqueue NeilBrown (2): block_dev: don't test bdev->bd_contains when it is not stable NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success. Nicholas Bellinger (3): target: Use correct SCSI status during EXTENDED_COPY exception target: Fix early transport_generic_handle_tmr abort scenario target: Fix COMPARE_AND_WRITE ref leak for non GOOD status Nicholas Mc Guire (1): x86/boot: Add missing declaration of string functions Nicholas Piggin (1): powerpc/boot: Request no dynamic linker for boot wrapper Nicolai Stange (1): f2fs: set ->owner for debugfs status file's file_operations Nicolas Iooss (1): ite-cir: initialize use_demodulator before using it Nicolas PLANEL (1): USB: ch341: set tty baud speed according to tty struct Nikolay Aleksandrov (1): net: bridge: fix old ioctl unlocked net device walk Oliver Hartkopp (1): can: bcm: fix hrtimer/tasklet termination in bcm op removal Oliver Neukum (1): usb: storage: unusual_uas: Add JMicron JMS56x to unusual device Ondrej Kozina (1): dm crypt: mark key as invalid until properly loaded Pan Bian (2): USB: serial: kl5kusb105: abort on open exception path clk: clk-wm831x: fix a logic error Paolo Abeni (1): ip6_tunnel: disable caching when the traffic class is inherited Paolo Bonzini (1): kvm: fix page struct leak in handle_vmon Patrik Jakobsson (1): drm/gma500: Add compat ioctl Paul Mackerras (1): KVM: PPC: Book3S HV: Save/restore XER in checkpointed register state Pavel Shilovsky (3): CIFS: Fix missing nls unload in smb2_reconnect() CIFS: Fix a possible memory corruption in push locks CIFS: Fix a possible memory corruption during reconnect Peter Zijlstra (1): perf/core: Fix PERF_RECORD_MMAP2 prot/flags for anonymous memory Quinn Tran (1): qla2xxx: Fix crash due to null pointer access Rabin Vincent (1): block: protect iterate_bdevs() against concurrent close Rasmus Villemoes (1): lib/vsprintf.c: improve sanity check in vsnprintf() Reiter Wolfgang (2): drop_monitor: add missing call to genlmsg_end drop_monitor: consider inserted data in genlmsg_end Richard Genoud (1): tty/serial: atmel: RS485 half duplex w/DMA: enable RX after TX is done Richard Weinberger (1): ubifs: Fix journal replay wrt. xattr nodes Robbie Ko (1): Btrfs: fix tree search logic when replaying directory entry deletes Rolf Eike Beer (1): selftests: do not require bash to run netsocktests testcase Russell Currey (1): drivers/gpu/drm/ast: Fix infinite loop if read fails Russell King (1): i2c: mux: pca954x: fix i2c mux selection caching Saeed Mahameed (1): IB/mlx4: Fix port query for 56Gb Ethernet links Salvatore Benedetto (1): crypto: api - Clear CRYPTO_ALG_DEAD bit before registering an alg Sergei Shtylyov (3): sh_eth: enable RX descriptor word 0 shift on SH7734 sh_eth: fix EESIPR values for SH77{34|63} sh_eth: R8A7740 supports packet shecksumming Sergey Senozhatsky (1): printk: use rcuidle console tracepoint Shannon Nelson (1): tcp: fix tcp_fastopen unaligned access complaints on sparc Shaohua Li (1): md: MD_RECOVERY_NEEDED is set for mddev->recovery Shmulik Ladkani (1): net/sched: em_meta: Fix 'meta vlan' to correctly recognize zero VID frames Simon Horman (1): sit: correct IP protocol used in ipip6_err Soheil Hassas Yeganeh (1): sock: fix sendmmsg for partial sendmsg Stefan Wahren (1): mmc: mxs-mmc: Fix additional cycles after transmission stop Steffen Maier (3): scsi: zfcp: do not trace pure benign residual HBA responses at default level scsi: zfcp: fix rport unblock race with LUN recovery scsi: zfcp: fix use-after-free by not tracing WKA port open/close on failed send Steven Rostedt (Red Hat) (2): ftrace/x86_32: Set ftrace_stub to weak to prevent gcc from using short jumps to it fgraph: Handle a case where a tracer ignores set_graph_notrace Takashi Iwai (7): ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream() ALSA: hda - Add the top speaker pin config for HP Spectre x360 ALSA: hda - Gate the mic jack on HP Z1 Gen3 AiO ALSA: hda - Fix up GPIO for ASUS ROG Ranger ALSA: hda - Apply asus-mode8 fixup to ASUS X71SL ALSA: seq: Don't handle loop timeout at snd_seq_pool_done() ALSA: seq: Fix race at creating a queue Theodore Ts'o (3): ext4: fix in-superblock mount options processing ext4: use more strict checks for inodes_per_block on mount ext4: add sanity checking to count_overhead() Thorsten Horstmann (1): mac80211: Fix adding of mesh vendor IEs Tom Goff (1): ipmr/ip6mr: Initialize the last assert time of mfc entries. Tony Lindgren (1): usb: musb: Fix trying to free already-free IRQ 4 Trond Myklebust (1): NFS: Fix a performance regression in readdir Vineet Gupta (2): ARC: [arcompact] handle unaligned access delay slot corner case ARC: [arcompact] brown paper bag bug in unaligned access delay slot fixup Vlad Tsyrklevich (1): i2c: fix kernel memory disclosure in dev interface Vladimir Zapolskiy (3): ARM: dts: imx31: fix clock control module interrupts description ARM: dts: imx31: move CCM device node to AIPS2 bus devices ARM: dts: imx31: fix AVIC base address WANG Cong (4): ping: fix a null pointer dereference sch_htb: update backlog as well sch_dsmark: update backlog as well sit: fix a double free on error path Wan Ahmad Zainie (1): usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake Wei Fang (1): scsi: avoid a permanent stop of the scsi device's request queue Wei Yongjun (1): iw_cxgb4: Fix error return code in c4iw_rdev_open() Willem de Bruijn (2): tun: read vnet_hdr_sz once macvtap: read vnet_hdr_size once Yang Yang (1): futex: Move futex_init() to core_initcall Yegor Yefremov (1): can: ti_hecc: add missing prepare and unprepare of the clock hayeswang (1): r8152: fix the sw rx checksum is unavailable stephen hemminger (1): netvsc: reduce maximum GSO size