[PATCH 4.4 000/188] 4.4.276-rc1 review

From: Greg Kroah-Hartman
Date: Mon Jul 19 2021 - 10:58:08 EST


This is the start of the stable review cycle for the 4.4.276 release.
There are 188 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed, 21 Jul 2021 14:47:42 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.276-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.4.276-rc1

Martin Fäcknitz <faecknitz@xxxxxxxxxxxx>
MIPS: vdso: Invalid GIC access through VDSO

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
mips: disable branch profiling in boot/decompress.o

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe()

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx>
memory: fsl_ifc: fix leak of private memory on probe failure

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx>
memory: fsl_ifc: fix leak of IO mapping on probe failure

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
rtc: fix snprintf() checking in is_rtc_hctosys()

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxx>
ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4

Nathan Chancellor <nathan@xxxxxxxxxx>
hexagon: use common DISCARDS macro

Zhen Lei <thunder.leizhen@xxxxxxxxxx>
ALSA: isa: Fix error return code in snd_cmi8330_probe()

Gao Xiang <hsiangkao@xxxxxxxxxxxxxxxxx>
nfs: fix acl memory leak of posix_acl_create()

Zhen Lei <thunder.leizhen@xxxxxxxxxx>
um: fix error return code in winch_tramp()

Zhen Lei <thunder.leizhen@xxxxxxxxxx>
um: fix error return code in slip_open()

Krzysztof Wilczyński <kw@xxxxxxxxx>
PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun

Xie Yongji <xieyongji@xxxxxxxxxxxxx>
virtio_console: Assure used length from device is limited

Xie Yongji <xieyongji@xxxxxxxxxxxxx>
virtio-blk: Fix memory leak among suspend/resume procedure

Zou Wei <zou_wei@xxxxxxxxxx>
power: supply: ab8500: add missing MODULE_DEVICE_TABLE

Zou Wei <zou_wei@xxxxxxxxxx>
power: supply: charger-manager: add missing MODULE_DEVICE_TABLE

Jeff Layton <jlayton@xxxxxxxxxx>
ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty

Zou Wei <zou_wei@xxxxxxxxxx>
watchdog: Fix possible use-after-free by calling del_timer_sync()

Zou Wei <zou_wei@xxxxxxxxxx>
watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()

Zou Wei <zou_wei@xxxxxxxxxx>
watchdog: Fix possible use-after-free in wdt_startup()

Nick Desaulniers <ndesaulniers@xxxxxxxxxx>
ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1

Bixuan Cui <cuibixuan@xxxxxxxxxx>
power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE

Linus Walleij <linus.walleij@xxxxxxxxxx>
power: supply: ab8500: Avoid NULL pointers

Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
pwm: spear: Don't modify HW state in .remove callback

Dimitri John Ledkov <dimitri.ledkov@xxxxxxxxxxxxx>
lib/decompress_unlz4.c: correctly handle zero-padding around initrds.

Jiajun Cao <jjcao20@xxxxxxxxxxxx>
ALSA: hda: Add IRQ check for platform_get_irq()

Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
backlight: lm3630a: Fix return code of .update_status() callback

Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
powerpc/boot: Fixup device-tree on little endian

Yang Yingliang <yangyingliang@xxxxxxxxxx>
usb: gadget: hid: fix error return code in hid_bind()

Ruslan Bilovol <ruslan.bilovol@xxxxxxxxx>
usb: gadget: f_hid: fix endianness issue with descriptors

Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx>
ALSA: bebob: add support for ToneWeal FW66

Zhen Lei <thunder.leizhen@xxxxxxxxxx>
ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing()

Athira Rajeev <atrajeev@xxxxxxxxxxxxxxxxxx>
selftests/powerpc: Fix "no_handler" EBB selftest

Yang Yingliang <yangyingliang@xxxxxxxxxx>
ALSA: ppc: fix error return code in snd_pmac_probe()

Srinivas Neeli <srinivas.neeli@xxxxxxxxxx>
gpio: zynq: Check return value of pm_runtime_get_sync

Geoff Levand <geoff@xxxxxxxxxxxxx>
powerpc/ps3: Add dma_mask to ps3_dma_region

Takashi Iwai <tiwai@xxxxxxx>
ALSA: sb: Fix potential double-free of CSP mixer elements

Zou Wei <zou_wei@xxxxxxxxxx>
mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE

Mike Christie <michael.christie@xxxxxxxxxx>
scsi: iscsi: Add iscsi_cls_conn refcount helpers

Jiapeng Chong <jiapeng.chong@xxxxxxxxxxxxxxxxx>
fs/jfs: Fix missing error code in lmLogInit()

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
tty: serial: 8250: serial_cs: Fix a memory leak in error handling path

James Smart <jsmart2021@xxxxxxxxx>
scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology

Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx>
Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro"

Lv Yunlong <lyl2019@xxxxxxxxxxxxxxxx>
misc/libmasm/module: Fix two use after free in ibmasm_init_one

Sherry Sun <sherry.sun@xxxxxxx>
tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero

Lai Jiangshan <laijs@xxxxxxxxxxxxxxxxx>
KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run()

Sean Christopherson <seanjc@xxxxxxxxxx>
KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled

Pavel Skripkin <paskripkin@xxxxxxxxx>
jfs: fix GPF in diFree

Benjamin Drung <bdrung@xxxxxxxxx>
media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K

Johan Hovold <johan@xxxxxxxxxx>
media: gspca/sunplus: fix zero-length control requests

Johan Hovold <johan@xxxxxxxxxx>
media: gspca/sq905: fix control-request direction

Pavel Skripkin <paskripkin@xxxxxxxxx>
media: zr364xx: fix memory leak in zr364xx_start_readpipe

Hou Tao <houtao1@xxxxxxxxxx>
dm btree remove: assign new_root only when removal succeeds

Lv Yunlong <lyl2019@xxxxxxxxxxxxxxxx>
ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe

Yun Zhou <yun.zhou@xxxxxxxxxxxxx>
seq_buf: Fix overflow in seq_buf_putmem_hex()

Linus Walleij <linus.walleij@xxxxxxxxxx>
power: supply: ab8500: Fix an old bug

Petr Pavlu <petr.pavlu@xxxxxxxx>
ipmi/watchdog: Stop watchdog timer when the current action is 'none'

Dmitry Osipenko <digetx@xxxxxxxxx>
ASoC: tegra: Set driver_name=tegra for all machine drivers

Timo Sigurdsson <public_timo.s@xxxxxxxxxxxxxx>
ata: ahci_sunxi: Disable DIPM

Al Cooper <alcooperx@xxxxxxxxx>
mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode

Nathan Chancellor <nathan@xxxxxxxxxx>
powerpc/barrier: Avoid collision with clang's __lwsync macro

Davis Mosenkovs <davis@xxxxxxxxxxxx>
mac80211: fix memory corruption in EAPOL handling

Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxxxxx>
can: bcm: delay release of struct bcm_op after synchronize_rcu()

Oliver Hartkopp <socketcan@xxxxxxxxxxxx>
can: gw: synchronize rcu operations before removing gw job entry

Miklos Szeredi <mszeredi@xxxxxxxxxx>
fuse: reject internal errno

Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
sctp: add size validation when walking chunks

Tim Jiang <tjiang@xxxxxxxxxxxxxx>
Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc.

Kai-Heng Feng <kai.heng.feng@xxxxxxxxxxxxx>
Bluetooth: Shutdown controller after workqueues are flushed or cancelled

Yu Liu <yudiliu@xxxxxxxxxx>
Bluetooth: Fix the HCI to MGMT status conversion table

Gerd Rausch <gerd.rausch@xxxxxxxxxx>
RDMA/cma: Fix rdma_resolve_route() memory leak

Gustavo A. R. Silva <gustavoars@xxxxxxxxxx>
wireless: wext-spy: Fix out-of-bounds warning

Íñigo Huguet <ihuguet@xxxxxxxxxx>
sfc: error code if SRIOV cannot be disabled

Íñigo Huguet <ihuguet@xxxxxxxxxx>
sfc: avoid double pci_remove of VFs

Zheyu Ma <zheyuma97@xxxxxxxxx>
atm: nicstar: register the interrupt handler in the right place

Zheyu Ma <zheyuma97@xxxxxxxxx>
atm: nicstar: use 'dma_free_coherent' instead of 'kfree'

Zou Wei <zou_wei@xxxxxxxxxx>
cw1200: add missing MODULE_DEVICE_TABLE

Lee Gibson <leegib@xxxxxxxxx>
wl1251: Fix possible buffer overflow in wl1251_cmd_scan

Tony Lindgren <tony@xxxxxxxxxxx>
wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP

Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
xfrm: Fix error reporting in xfrm_state_construct.

Minchan Kim <minchan@xxxxxxxxxx>
selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC

Yang Yingliang <yangyingliang@xxxxxxxxxx>
net: micrel: check return value after calling platform_get_resource()

Joe Thornber <ejt@xxxxxxxxxx>
dm space maps: don't reset space map allocation cursor when committing

Jiapeng Chong <jiapeng.chong@xxxxxxxxxxxxxxxxx>
RDMA/cxgb4: Fix missing error code in create_qp()

Willy Tarreau <w@xxxxxx>
ipv6: use prandom_u32() for ID generation

Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
e100: handle eeprom as little endian

Arturo Giusti <koredump@xxxxxxxxxxxxxx>
udf: Fix NULL pointer dereference in udf_symlink function

Xie Yongji <xieyongji@xxxxxxxxxxxxx>
drm/virtio: Fix double free on probe failure

Pavel Skripkin <paskripkin@xxxxxxxxx>
reiserfs: add check for invalid 1st journal block

Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx>
net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT

Zou Wei <zou_wei@xxxxxxxxxx>
atm: nicstar: Fix possible use-after-free in nicstar_cleanup()

Zou Wei <zou_wei@xxxxxxxxxx>
mISDN: fix possible use-after-free in HFC_cleanup()

Zou Wei <zou_wei@xxxxxxxxxx>
atm: iphase: fix possible use-after-free in ia_module_exit()

Bibo Mao <maobibo@xxxxxxxxxxx>
hugetlb: clear huge pte during flush function on mips platform

Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
net: pch_gbe: Use proper accessors to BE data in pch_ptp_match()

Quat Le <quat.le@xxxxxxxxxx>
scsi: core: Retry I/O for Notify (Enable Spinup) Required error

Johan Hovold <johan@xxxxxxxxxx>
mmc: vub3000: fix control-request direction

Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
extcon: max8997: Add missing modalias string

Stephan Gerhold <stephan@xxxxxxxxxxx>
extcon: sm5502: Drop invalid register write in sm5502_reg_data

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe()

Zhen Lei <thunder.leizhen@xxxxxxxxxx>
scsi: mpt3sas: Fix error return value in _scsih_expander_add()

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
staging: gdm724x: check for overflow in gdm_lte_netif_rx()

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt()

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
s390: appldata depends on PROC_SYSCTL

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
scsi: FlashPoint: Rename si_flags field

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
tty: nozomi: Fix the error handling path of 'nozomi_card_init()'

Yu Kuai <yukuai3@xxxxxxxxxx>
char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol()

Zhen Lei <thunder.leizhen@xxxxxxxxxx>
Input: hil_kbd - fix error return code in hil_dev_connect()

Jonathan Cameron <Jonathan.Cameron@xxxxxxxxxx>
iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp()

Jonathan Cameron <Jonathan.Cameron@xxxxxxxxxx>
iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp()

Jonathan Cameron <Jonathan.Cameron@xxxxxxxxxx>
iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp()

Nuno Sa <nuno.sa@xxxxxxxxxx>
iio: adis_buffer: do not return ints in irq handlers

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
tty: nozomi: Fix a resource leak in an error handling function

Muchun Song <songmuchun@xxxxxxxxxxxxx>
writeback: fix obtain a reference to a freeing memcg css

Dinghao Liu <dinghao.liu@xxxxxxxxxx>
i40e: Fix error handling in i40e_vsi_open

Eric Dumazet <edumazet@xxxxxxxxxx>
vxlan: add missing rcu_read_lock() in neigh_reduce()

Pavel Skripkin <paskripkin@xxxxxxxxx>
net: ethernet: ezchip: fix error handling

Pavel Skripkin <paskripkin@xxxxxxxxx>
net: ethernet: ezchip: fix UAF in nps_enet_remove

Pavel Skripkin <paskripkin@xxxxxxxxx>
net: ethernet: aeroflex: fix UAF in greth_of_remove

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nft_exthdr: check for IPv6 packet before further processing

Liu Shixin <liushixin2@xxxxxxxxxx>
netlabel: Fix memory leak in netlbl_mgmt_add_common

Yang Li <yang.lee@xxxxxxxxxxxxxxxxx>
ath10k: Fix an error code in ath10k_add_interface()

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
brcmsmac: mac80211_if: Fix a resource leak in an error handling path

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
wireless: carl9170: fix LEDS build errors & warnings

Colin Ian King <colin.king@xxxxxxxxxxxxx>
drm: qxl: ensure surf.data is ininitialized

Zhen Lei <thunder.leizhen@xxxxxxxxxx>
ehea: fix error return code in ehea_restart_qps()

Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
net: pch_gbe: Propagate error from devm_gpio_request_one()

Krzysztof Wilczyński <kw@xxxxxxxxx>
ACPI: sysfs: Fix a buffer overrun problem with description_show()

Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
crypto: nx - Fix RCU warning in nx842_OF_upd_status

Mirko Vogt <mirko-dev|linux@xxxxxxx>
spi: spi-sun6i: Fix chipselect/clock bug

Dillon Min <dillon.minfei@xxxxxxxxx>
media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx

Zhen Lei <thunder.leizhen@xxxxxxxxxx>
mmc: usdhi6rol0: fix error return code in usdhi6_probe()

Gustavo A. R. Silva <gustavoars@xxxxxxxxxx>
media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2()

Zhen Lei <thunder.leizhen@xxxxxxxxxx>
media: tc358743: Fix error return code in tc358743_probe_of()

Sergey Shtylyov <s.shtylyov@xxxxxxxxxxxx>
pata_ep93xx: fix deferred probing

Sergey Shtylyov <s.shtylyov@xxxxxx>
pata_octeon_cf: avoid WARN_ON() in ata_host_activate()

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
media: I2C: change 'RST' to "RSET" to fix multiple build errors

Sergey Shtylyov <s.shtylyov@xxxxxxxxxxxx>
pata_rb532_cf: fix deferred probing

Sergey Shtylyov <s.shtylyov@xxxxxxxxxxxx>
sata_highbank: fix deferred probing

Zhen Lei <thunder.leizhen@xxxxxxxxxx>
crypto: ux500 - Fix error return code in hash_hw_final()

Corentin Labbe <clabbe@xxxxxxxxxxxx>
crypto: ixp4xx - dma_unmap the correct address

Arnd Bergmann <arnd@xxxxxxxx>
ia64: mca_drv: fix incorrect array size calculation

Jiapeng Chong <jiapeng.chong@xxxxxxxxxxxxxxxxx>
platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard()

Hanjun Guo <guohanjun@xxxxxxxxxx>
ACPI: bus: Call kobject_put() in acpi_init() error path

Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
random32: Fix implicit truncation warning in prandom_seed_state()

Alexander Aring <aahringo@xxxxxxxxxx>
fs: dlm: cancel work sync othercon

zhangyi (F) <yi.zhang@xxxxxxxxxx>
block_dump: remove block_dump feature in mark_inode_dirty()

Mario Limonciello <mario.limonciello@xxxxxxx>
ACPI: processor idle: Fix up C-state latency if not ordered

Axel Lin <axel.lin@xxxxxxxxxx>
regulator: da9052: Ensure enough delay time for .set_voltage_time_sel

Christophe Leroy <christophe.leroy@xxxxxxxxxx>
btrfs: disable build on platforms having page size 256K

Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx>
media: dvb_net: avoid speculation from net slot

Ard Biesheuvel <ardb@xxxxxxxxxx>
crypto: shash - avoid comparing pointers to exported functions under CFI

Zheyu Ma <zheyuma97@xxxxxxxxx>
mmc: via-sdmmc: add a check against NULL pointer dereference

Zheyu Ma <zheyuma97@xxxxxxxxx>
media: bt8xx: Fix a missing check bug in bt878_probe

Lv Yunlong <lyl2019@xxxxxxxxxxxxxxxx>
media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release

Jack Xu <jack.xu@xxxxxxxxx>
crypto: qat - remove unused macro in FW loader

Jack Xu <jack.xu@xxxxxxxxx>
crypto: qat - check return code of qat_hal_rd_rel_reg()

Anirudh Rayabharam <mail@xxxxxxxxxxxxx>
media: pvrusb2: fix warning in pvr2_i2c_core_done

Pavel Skripkin <paskripkin@xxxxxxxxx>
media: cpia2: fix memory leak in cpia2_usb_probe

Bixuan Cui <cuibixuan@xxxxxxxxxx>
crypto: nx - add missing MODULE_DEVICE_TABLE

Tian Tao <tiantao6@xxxxxxxxxxxxx>
spi: omap-100k: Fix the length judgment problem

Jay Fang <f.fangjian@xxxxxxxxxx>
spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages()

Miklos Szeredi <mszeredi@xxxxxxxxxx>
fuse: check connected before queueing on fpq->io

Yun Zhou <yun.zhou@xxxxxxxxxxxxx>
seq_buf: Make trace_seq_putmem_hex() support data longer than 8

Michael Buesch <m@xxxxxxx>
ssb: sdio: Don't overwrite const buffer if block_write fails

Pali Rohár <pali@xxxxxxxxxx>
ath9k: Fix kernel NULL pointer dereference during ath_reset_internal()

Ondrej Zary <linux@xxxxxxx>
serial_cs: Add Option International GSM-Ready 56K/ISDN modem

Oliver Lang <Oliver.Lang@xxxxxxxxxxxxxxxxxxx>
iio: ltr501: ltr501_read_ps(): add missing endianness conversion

Oliver Lang <Oliver.Lang@xxxxxxxxxxxxxxxxxxx>
iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR

Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too

Vineeth Vijayan <vneethv@xxxxxxxxxxxxx>
s390/cio: dont call css_wait_for_slow_path() inside a lock

Zhang Xiaoxu <zhangxiaoxu5@xxxxxxxxxx>
SUNRPC: Should wake up the privileged task firstly.

Zhang Xiaoxu <zhangxiaoxu5@xxxxxxxxxx>
SUNRPC: Fix the batch tasks count wraparound.

Pan Dong <pandong.peter@xxxxxxxxxxxxx>
ext4: fix avefreec in find_group_orlov

Zhang Yi <yi.zhang@xxxxxxxxxx>
ext4: remove check for zero nr_to_scan in ext4_es_scan()

Zhang Yi <yi.zhang@xxxxxxxxxx>
ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit

Anirudh Rayabharam <mail@xxxxxxxxxxxxx>
ext4: fix kernel infoleak via ext4_extent_header

David Sterba <dsterba@xxxxxxxx>
btrfs: clear defrag status of a root if starting transaction fails

Ludovic Desroches <ludovic.desroches@xxxxxxxxxxxxx>
ARM: dts: at91: sama5d4: fix pinctrl muxing

Alexander Larkin <avlarkin82@xxxxxxxxx>
Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
iov_iter_fault_in_readable() should do nothing in xarray case

Desmond Cheong Zhi Xi <desmondcheongzx@xxxxxxxxx>
ntfs: fix validity check for file name attribute

Hannu Hartikainen <hannu@xxxxxxx>
USB: cdc-acm: blacklist Heimann USB Appset device

Linyu Yuan <linyyuan@xxxxxxxxxxxxxx>
usb: gadget: eem: fix echo command packet response issue

Pavel Skripkin <paskripkin@xxxxxxxxx>
net: can: ems_usb: fix use-after-free in ems_usb_disconnect()

Johan Hovold <johan@xxxxxxxxxx>
Input: usbtouchscreen - fix control-request directions

Pavel Skripkin <paskripkin@xxxxxxxxx>
media: dvb-usb: fix wrong definition

Daehwan Jung <dh10.jung@xxxxxxxxxxx>
ALSA: usb-audio: fix rate on Ozone Z90 USB headset


-------------

Diffstat:

Makefile | 4 +-
arch/arm/boot/dts/exynos5422-odroidxu4.dts | 2 +-
arch/arm/boot/dts/sama5d4.dtsi | 2 +-
arch/arm/probes/kprobes/test-thumb.c | 10 ++--
arch/hexagon/kernel/vmlinux.lds.S | 7 +--
arch/ia64/kernel/mca_drv.c | 2 +-
arch/mips/boot/compressed/decompress.c | 2 +
arch/mips/include/asm/hugetlb.h | 8 ++-
arch/mips/vdso/vdso.h | 2 +-
arch/powerpc/boot/devtree.c | 59 +++++++++++++---------
arch/powerpc/boot/ns16550.c | 9 +++-
arch/powerpc/include/asm/barrier.h | 2 +
arch/powerpc/include/asm/ps3.h | 2 +
arch/powerpc/platforms/ps3/mm.c | 12 +++++
arch/s390/Kconfig | 2 +-
arch/um/drivers/chan_user.c | 3 +-
arch/um/drivers/slip_user.c | 3 +-
arch/x86/kvm/cpuid.c | 8 ++-
arch/x86/kvm/x86.c | 2 +
crypto/shash.c | 18 +++++--
drivers/acpi/bus.c | 1 +
drivers/acpi/device_sysfs.c | 2 +-
drivers/acpi/processor_idle.c | 40 +++++++++++++++
drivers/ata/ahci_sunxi.c | 2 +-
drivers/ata/pata_ep93xx.c | 2 +-
drivers/ata/pata_octeon_cf.c | 5 +-
drivers/ata/pata_rb532_cf.c | 6 ++-
drivers/ata/sata_highbank.c | 6 ++-
drivers/atm/iphase.c | 2 +-
drivers/atm/nicstar.c | 26 +++++-----
drivers/block/virtio_blk.c | 2 +
drivers/bluetooth/btusb.c | 5 ++
drivers/char/ipmi/ipmi_watchdog.c | 22 ++++----
drivers/char/pcmcia/cm4000_cs.c | 4 ++
drivers/char/virtio_console.c | 4 +-
drivers/crypto/ixp4xx_crypto.c | 2 +-
drivers/crypto/nx/nx-842-pseries.c | 9 ++--
drivers/crypto/qat/qat_common/qat_hal.c | 6 ++-
drivers/crypto/qat/qat_common/qat_uclo.c | 1 -
drivers/crypto/ux500/hash/hash_core.c | 1 +
drivers/extcon/extcon-max8997.c | 1 +
drivers/extcon/extcon-sm5502.c | 1 -
drivers/gpio/gpio-zynq.c | 5 +-
drivers/gpu/drm/qxl/qxl_dumb.c | 2 +
drivers/gpu/drm/virtio/virtgpu_kms.c | 1 +
drivers/iio/accel/bma180.c | 10 ++--
drivers/iio/accel/stk8312.c | 12 +++--
drivers/iio/accel/stk8ba50.c | 17 +++----
drivers/iio/imu/adis_buffer.c | 3 --
drivers/iio/light/ltr501.c | 15 ++++--
drivers/infiniband/core/cma.c | 3 +-
drivers/infiniband/hw/cxgb4/qp.c | 1 +
drivers/input/joydev.c | 2 +-
drivers/input/keyboard/hil_kbd.c | 1 +
drivers/input/touchscreen/usbtouchscreen.c | 8 +--
drivers/ipack/carriers/tpci200.c | 5 +-
drivers/isdn/hardware/mISDN/hfcpci.c | 2 +-
drivers/md/persistent-data/dm-btree-remove.c | 3 +-
drivers/md/persistent-data/dm-space-map-disk.c | 9 +++-
drivers/md/persistent-data/dm-space-map-metadata.c | 9 +++-
drivers/media/common/siano/smscoreapi.c | 22 ++++----
drivers/media/common/siano/smscoreapi.h | 4 +-
drivers/media/dvb-core/dvb_net.c | 25 ++++++---
drivers/media/i2c/s5c73m3/s5c73m3-core.c | 6 +--
drivers/media/i2c/s5c73m3/s5c73m3.h | 2 +-
drivers/media/i2c/s5k4ecgx.c | 10 ++--
drivers/media/i2c/s5k5baf.c | 6 +--
drivers/media/i2c/s5k6aa.c | 10 ++--
drivers/media/i2c/tc358743.c | 1 +
drivers/media/pci/bt8xx/bt878.c | 3 ++
drivers/media/platform/s5p-g2d/g2d.c | 3 ++
drivers/media/usb/cpia2/cpia2.h | 1 +
drivers/media/usb/cpia2/cpia2_core.c | 12 +++++
drivers/media/usb/cpia2/cpia2_usb.c | 13 ++---
drivers/media/usb/dvb-usb/cxusb.c | 2 +-
drivers/media/usb/gspca/sq905.c | 2 +-
drivers/media/usb/gspca/sunplus.c | 8 ++-
drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 4 +-
drivers/media/usb/uvc/uvc_video.c | 27 ++++++++++
drivers/media/usb/zr364xx/zr364xx.c | 1 +
drivers/media/v4l2-core/v4l2-fh.c | 1 +
drivers/memory/fsl_ifc.c | 8 +--
drivers/mfd/da9052-i2c.c | 1 +
drivers/mfd/stmpe-i2c.c | 2 +-
drivers/misc/ibmasm/module.c | 5 +-
drivers/mmc/host/sdhci.c | 4 ++
drivers/mmc/host/sdhci.h | 1 +
drivers/mmc/host/usdhi6rol0.c | 1 +
drivers/mmc/host/via-sdmmc.c | 3 ++
drivers/mmc/host/vub300.c | 2 +-
drivers/net/can/usb/ems_usb.c | 3 +-
drivers/net/ethernet/aeroflex/greth.c | 3 +-
drivers/net/ethernet/ezchip/nps_enet.c | 4 +-
drivers/net/ethernet/ibm/ehea/ehea_main.c | 9 ++--
drivers/net/ethernet/intel/e100.c | 12 ++---
drivers/net/ethernet/intel/i40e/i40e_main.c | 2 +
drivers/net/ethernet/micrel/ks8842.c | 4 ++
.../net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c | 29 +++++------
drivers/net/ethernet/sfc/ef10_sriov.c | 25 +++++----
drivers/net/vxlan.c | 2 +
drivers/net/wireless/ath/ath10k/mac.c | 1 +
drivers/net/wireless/ath/ath9k/main.c | 5 ++
drivers/net/wireless/ath/carl9170/Kconfig | 8 ++-
.../net/wireless/brcm80211/brcmsmac/mac80211_if.c | 8 ++-
drivers/net/wireless/cw1200/cw1200_sdio.c | 1 +
drivers/net/wireless/ti/wl1251/cmd.c | 9 ++--
drivers/net/wireless/ti/wl12xx/main.c | 7 +++
drivers/pci/pci-label.c | 2 +-
drivers/phy/phy-dm816x-usb.c | 17 +++++--
drivers/platform/x86/toshiba_acpi.c | 1 +
drivers/power/ab8500_btemp.c | 1 +
drivers/power/ab8500_charger.c | 19 ++++++-
drivers/power/ab8500_fg.c | 1 +
drivers/power/charger-manager.c | 1 +
drivers/power/reset/gpio-poweroff.c | 1 +
drivers/pwm/pwm-spear.c | 4 --
drivers/regulator/da9052-regulator.c | 3 +-
drivers/rtc/rtc-proc.c | 4 +-
drivers/s390/cio/chp.c | 3 ++
drivers/s390/cio/chsc.c | 2 -
drivers/scsi/FlashPoint.c | 32 ++++++------
drivers/scsi/be2iscsi/be_main.c | 1 +
drivers/scsi/libiscsi.c | 7 +--
drivers/scsi/lpfc/lpfc_els.c | 9 ++++
drivers/scsi/mpt3sas/mpt3sas_scsih.c | 4 +-
drivers/scsi/scsi_lib.c | 1 +
drivers/scsi/scsi_transport_iscsi.c | 12 +++++
drivers/spi/spi-omap-100k.c | 2 +-
drivers/spi/spi-sun6i.c | 6 ++-
drivers/spi/spi-topcliff-pch.c | 4 +-
drivers/ssb/sdio.c | 1 -
drivers/staging/gdm724x/gdm_lte.c | 20 ++++++--
drivers/tty/nozomi.c | 9 ++--
drivers/tty/serial/8250/serial_cs.c | 12 ++++-
drivers/tty/serial/fsl_lpuart.c | 3 ++
drivers/usb/class/cdc-acm.c | 5 ++
drivers/usb/gadget/function/f_eem.c | 43 ++++++++++++++--
drivers/usb/gadget/function/f_hid.c | 2 +-
drivers/usb/gadget/legacy/hid.c | 4 +-
drivers/video/backlight/lm3630a_bl.c | 12 ++---
drivers/watchdog/lpc18xx_wdt.c | 2 +-
drivers/watchdog/sbc60xxwdt.c | 2 +-
drivers/watchdog/sc520_wdt.c | 2 +-
drivers/watchdog/w83877f_wdt.c | 2 +-
fs/btrfs/Kconfig | 2 +
fs/btrfs/transaction.c | 6 ++-
fs/ceph/addr.c | 10 +---
fs/dlm/lowcomms.c | 2 +-
fs/ext4/extents.c | 3 ++
fs/ext4/extents_status.c | 4 +-
fs/ext4/ialloc.c | 11 ++--
fs/fs-writeback.c | 34 +++----------
fs/fuse/dev.c | 11 +++-
fs/jfs/inode.c | 3 +-
fs/jfs/jfs_logmgr.c | 1 +
fs/nfs/nfs3proc.c | 4 +-
fs/ntfs/inode.c | 2 +-
fs/reiserfs/journal.c | 14 +++++
fs/udf/namei.c | 4 ++
include/crypto/internal/hash.h | 8 +--
include/linux/mfd/abx500/ux500_chargalg.h | 2 +-
include/linux/prandom.h | 2 +-
include/scsi/scsi_transport_iscsi.h | 2 +
lib/decompress_unlz4.c | 8 +++
lib/iov_iter.c | 2 +-
lib/seq_buf.c | 8 ++-
net/bluetooth/hci_core.c | 16 +++---
net/bluetooth/mgmt.c | 3 ++
net/can/bcm.c | 7 ++-
net/can/gw.c | 3 ++
net/core/dev.c | 11 +++-
net/ipv6/output_core.c | 28 ++--------
net/mac80211/rx.c | 2 +-
net/netfilter/nft_exthdr.c | 3 ++
net/netlabel/netlabel_mgmt.c | 19 +++----
net/sctp/input.c | 2 +-
net/sunrpc/sched.c | 12 ++++-
net/wireless/wext-spy.c | 14 ++---
net/xfrm/xfrm_user.c | 28 +++++-----
security/selinux/avc.c | 13 ++---
sound/firewire/Kconfig | 5 +-
sound/firewire/bebob/bebob.c | 5 +-
sound/firewire/oxfw/oxfw.c | 2 +-
sound/isa/cmi8330.c | 2 +-
sound/isa/sb/sb16_csp.c | 8 ++-
sound/pci/hda/hda_tegra.c | 3 ++
sound/ppc/powermac.c | 6 ++-
sound/soc/soc-core.c | 2 +-
sound/soc/tegra/tegra_alc5632.c | 1 +
sound/soc/tegra/tegra_max98090.c | 1 +
sound/soc/tegra/tegra_rt5640.c | 1 +
sound/soc/tegra/tegra_rt5677.c | 1 +
sound/soc/tegra/tegra_wm8753.c | 1 +
sound/soc/tegra/tegra_wm8903.c | 1 +
sound/soc/tegra/tegra_wm9712.c | 1 +
sound/soc/tegra/trimslice.c | 1 +
sound/usb/format.c | 2 +
.../selftests/powerpc/pmu/ebb/no_handler_test.c | 2 -
198 files changed, 891 insertions(+), 453 deletions(-)