[PATCH 3.16 30/87] staging:iio:ad7150: fix threshold mode config bit

conv + i2c_smbus commands + drop unused poweroff timeout control.") Signed-off-by: Melissa Wen Signed-off-by: Jonathan Cameron Signed-off-by: Ben Hutchings --- drivers/staging/iio/cdc/ad7150.c | 19 +++ 1 file changed, 11 insertions(+), 8 deletions(-) --- a/drivers/staging/iio/cd

[PATCH 3.16 16/87] usb: xhci: avoid null pointer deref when bos field is NULL

igned-off-by: Mathias Nyman Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/usb/host/xhci.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/usb/host/xhci.c +++ b/drivers/usb/host/xhci.c @@ -4178

[PATCH 3.16 20/87] ipv4/igmp: fix another memory leak in igmpv3_del_delrec()

/socket.c:2086 [<0a770437>] do_syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301 [<d3adb93b>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 Fixes: 9c8bb163ae78 ("igmp, mld: Fix memory leak in igmpv3/mld_del_delrec()") Signed-off-by: Er

[PATCH 3.16 19/87] igmp: add a missing spin_lock_init()

r_src()") Reported-by: Andrey Konovalov Signed-off-by: Cong Wang Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/ipv4/igmp.c | 1 + 1 file changed, 1 insertion(+) --- a/net/ipv4/igmp.c +++ b/net/ipv4/igmp.c @@ -1106,6 +1106,7 @@ static void igmpv3_add_delrec(struct in_

[PATCH 3.16 13/87] tty: max310x: Fix external crystal register setup

to make the MAX3107 with an external crystal on our board able to send or receive data. Signed-off-by: Joe Burmeister Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/tty/serial/max310x.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/tty/serial

[PATCH 3.16 14/87] powerpc/perf: add missing put_cpu_var in power_pmu_event_init

), .sample_type = PERF_SAMPLE_BRANCH_STACK, .branch_sample_type = PERF_SAMPLE_BRANCH_ANY_RETURN, }; int main() { syscall(__NR_perf_event_open, , 0, -1, -1, 0); } Signed-off-by: Jan Stancek Signed-off-by: Michael Ellerman Signed-off-by: Ben Hutchings --- arch

[PATCH 3.16 23/87] Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD

Torokhov Signed-off-by: Ben Hutchings --- drivers/input/misc/uinput.c | 22 -- 1 file changed, 20 insertions(+), 2 deletions(-) --- a/drivers/input/misc/uinput.c +++ b/drivers/input/misc/uinput.c @@ -908,13 +908,31 @@ static long uinput_ioctl(struct file *fi #ifdef

[PATCH 3.16 27/87] genwqe: Prevent an integer overflow in the ioctl

CB queue") Signed-off-by: Dan Carpenter Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/misc/genwqe/card_dev.c | 2 ++ drivers/misc/genwqe/card_utils.c | 4 2 files changed, 6 insertions(+) --- a/drivers/misc/genwqe/card_dev.c +++ b/drivers/misc/genwqe/

[PATCH 3.16 33/87] llc: fix skb leak in llc_build_and_send_ui_pkt()

syscall_64+0x76/0x1a0 arch/x86/entry/common.c:301 [<0c32554f>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") Signed-off-by: Eric Dumazet Reported-by: syzbot Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/llc/l

[PATCH 3.16 15/87] powerpc/perf: Fix MMCRA corruption by bhrb_filter

k") Signed-off-by: Ravi Bangoria Reviewed-by: Madhavan Srinivasan Signed-off-by: Michael Ellerman [bwh: Backported to 3.16: drop changes in power9-pmu.c] Signed-off-by: Ben Hutchings --- --- a/arch/powerpc/perf/core-book3s.c +++ b/arch/powerpc/perf/core-book3s.c @@ -1726,6 +1726,7 @@ static int p

[PATCH 3.16 34/87] CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM

led the allocation before nr_pages, therefore we may end up calling put_page with NULL pointer, causing oops Signed-off-by: Roberto Bergantinos Corpas Acked-by: Pavel Shilovsky Signed-off-by: Steve French Signed-off-by: Ben Hutchings --- fs/cifs/file.c | 4 +++- 1 file changed, 3 insertions(+)

[PATCH 3.16 21/87] ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST

other memory leak in igmpv3_del_delrec()") Signed-off-by: Eric Dumazet Reported-by: kbuild test robot Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/ipv4/igmp.c | 22 +++--- 1 file changed, 11 insertions(+), 11 deletions(-) --- a/net/ipv4/igmp.c +++

[PATCH 3.16 38/87] scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)

scsi dev instead of zfcp unit") Fixes: f8210e34887e ("[SCSI] zfcp: Allow midlayer to scan for LUNs when running in NPIV mode") Reviewed-by: Benjamin Block Signed-off-by: Martin K. Petersen Signed-off-by: Ben Hutchings --- drivers/s390/scsi/zfcp_ext.h | 1 + dri

[PATCH 3.16 35/87] s390/crypto: fix possible sleep during spinlock aquired

by: Harald Freudenberger Reported-by: Julian Wiedmann Signed-off-by: Heiko Carstens [bwh: Backported to 3.16: - Replace spin_unlock() on all exit paths - Adjust context] Signed-off-by: Ben Hutchings --- --- a/arch/s390/crypto/aes_s390.c +++ b/arch/s390/crypto/aes_s390.c @@ -25,7 +25,7 @@ #include

[PATCH 3.16 40/87] net-gro: fix use-after-free read in napi_gro_frags()

quot;) Signed-off-by: Eric Dumazet Reported-by: syzbot Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/core/dev.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/net/core/dev.c +++ b/net/core/dev.c @@ -4239,7 +4239,6 @@ static struct sk_buff *napi

[PATCH 3.16 42/87] USB: usb-storage: Add new ID to ums-realtek

-off-by: Kai-Heng Feng Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/usb/storage/unusual_realtek.h | 5 + 1 file changed, 5 insertions(+) --- a/drivers/usb/storage/unusual_realtek.h +++ b/drivers/usb/storage/unusual_realtek.h @@ -28,6 +28,11 @@ UNUSUAL_DEV

[PATCH 3.16 04/87] ASoC: cs42xx8: Add regcache mask dirty

ister need to be reconfigured. Fixes: 0c516b4ff85c ("ASoC: cs42xx8: Add codec driver support for CS42448/CS42888") Signed-off-by: Shengjiu Wang Signed-off-by: Mark Brown Signed-off-by: Ben Hutchings --- sound/soc/codecs/cs42xx8.c | 1 + 1 file changed, 1 insertion(+) --- a/sound/soc/co

[PATCH 3.16 02/87] spi: bitbang: Fix NULL pointer dereference in spi_unregister_master

Reviewed-by: Axel Lin Reviewed-by: Mukesh Ojha Signed-off-by: Mark Brown Signed-off-by: Ben Hutchings --- drivers/spi/spi-bitbang.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/spi/spi-bitbang.c +++ b/drivers/spi/spi-bitbang.c @@ -462,7 +462,7 @@ int spi_bitbang_st

[PATCH 3.16 36/87] usbip: usbip_host: fix stub_dev lock context imbalance regression

_host: fix BUG: sleeping function called from invalid context") Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.16: adjust filename] Signed-off-by: Ben Hutchings --- drivers/staging/usbip/stub_dev.c | 36 +++- 1 file changed, 23 insertions(+), 13

[PATCH 3.16 37/87] scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove

zfcp_get_port_by_wwpn() anymore and need to put it. Signed-off-by: Steffen Maier Fixes: d99b601b6338 ("[SCSI] zfcp: restore refcount check on port_remove") Reviewed-by: Jens Remus Reviewed-by: Benjamin Block Signed-off-by: Martin K. Petersen Signed-off-by: Ben Hutchings --- drivers/s390/scsi/zf

[PATCH 3.16 31/87] i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr

it will be freed. Fixes: 838bfa6049fb ("i2c-dev: Add support for I2C_M_RECV_LEN") Signed-off-by: Yingjoe Chen Signed-off-by: Wolfram Sang Signed-off-by: Ben Hutchings --- drivers/i2c/i2c-dev.c | 1 + 1 file changed, 1 insertion(+) --- a/drivers/i2c/i2c-dev.c +++ b/drivers/i2c/i2c-dev.c @@ -30

[PATCH 3.16 12/87] serial: sh-sci: disable DMA for uart_console

/ Tested-by: Eugeniu Rosca Reviewed-by: Simon Horman Reviewed-by: Wolfram Sang Reviewed-by: Geert Uytterhoeven Signed-off-by: George G. Davis Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/tty/serial/sh-sci.c | 7 ++

[PATCH 3.16 11/87] USB: serial: pl2303: add Allied Telesis VT-Kit3

Signed-off-by: Johan Hovold Signed-off-by: Ben Hutchings --- drivers/usb/serial/pl2303.c | 1 + drivers/usb/serial/pl2303.h | 3 +++ 2 files changed, 4 insertions(+) --- a/drivers/usb/serial/pl2303.c +++ b/drivers/usb/serial/pl2303.c @@ -100,6 +100,7 @@ static const struct usb_device_id id_tab

[PATCH 3.16 39/87] signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO

: syzbot+0d602a1b0d8c95bdf...@syzkaller.appspotmail.com Fixes: 84c751bd4aeb ("ptrace: add ability to retrieve signals without removing from a queue (v4)") Signed-off-by: "Eric W. Biederman" [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- kernel/ptrace.c | 10 --

[PATCH 3.16 41/87] kernel/signal.c: trace_signal_deliver when signal_group_exit

Cc: Arnd Bergmann Cc: Thomas Gleixner Cc: Deepa Dinamani Cc: Greg Kroah-Hartman Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds Signed-off-by: Ben Hutchings --- kernel/signal.c | 2 ++ 1 file changed, 2 insertions(+) --- a/kernel/signal.c +++ b/kern

[PATCH 3.16 43/87] USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.

ix back. Signed-off-by: Marco Zatta Signed-off-by: Greg Kroah-Hartman Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/usb/core/quirks.c | 3 +++ 1 file changed, 3 insertions(+) --- a/drivers/usb/core/quirks.c +++ b/drivers/usb/core/quirks.c @@ -70,6 +70,9 @@ static const

[PATCH 3.16 45/87] hwmon: (pmbus/core) Treat parameters as paged if on multiple pages

y: Guenter Roeck Signed-off-by: Ben Hutchings --- drivers/hwmon/pmbus/pmbus_core.c | 34 1 file changed, 30 insertions(+), 4 deletions(-) --- a/drivers/hwmon/pmbus/pmbus_core.c +++ b/drivers/hwmon/pmbus/pmbus_core.c @@ -987,14 +987,15 @@ static int pmbus_add_sensor

[PATCH 3.16 08/87] usbip: usbip_host: fix BUG: sleeping function called from invalid context

d-off-by: Shuah Khan Signed-off-by: Greg Kroah-Hartman [bwh: Backported to 3.16: adjust filename, context] Signed-off-by: Ben Hutchings --- drivers/staging/usbip/stub_dev.c | 65 1 file changed, 43 insertions(+), 22 deletions(-) --- a/drivers/staging/usbip/

[PATCH 3.16 48/87] pktgen: do not sleep with the thread lock held.

v2: - no need to check for thread existence after flipping the lock, pktgen threads are freed only at net exit time - Fixes: 6146e6a43b35 ("[PKTGEN]: Removes thread_{un,}lock() macros.") Reported-and-tested-by: Matteo Croce Signed-off-by: Paolo Abeni Signed-off-by: David S. Miller Si

[PATCH 3.16 51/87] can: purge socket error queue on sock destruct

. Fixes: 51f31cabe3ce ("ip: support for TX timestamps on UDP and RAW sockets") Reported-by: syzbot+a90604060cb40f5bd...@syzkaller.appspotmail.com Signed-off-by: Willem de Bruijn Signed-off-by: Marc Kleine-Budde Signed-off-by: Ben Hutchings --- net/can/af_can.c | 1 + 1 file changed, 1

[PATCH 3.16 58/87] cifs: add spinlock for the openFileList to cifsInodeInfo

off-by: Steve French Reviewed-by: Pavel Shilovsky [bwh: Backported to 3.16: adjust context, indentation] Signed-off-by: Ben Hutchings --- fs/cifs/cifsfs.c | 1 + fs/cifs/cifsglob.h | 5 + fs/cifs/file.c | 8 ++-- 3 files changed, 12 insertions(+), 2 deletions(-) --- a/fs/cifs/cifsf

[PATCH 3.16 52/87] ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero

in ipv6_flowlabel_opt() Fixes: 18367681a10b ("ipv6 flowlabel: Convert np->ipv6_fl_list to RCU.") Signed-off-by: Eric Dumazet Cc: Willem de Bruijn Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/ipv6/ip6_flowlabel.c | 7 --- 1 file changed, 4 insertions(+), 3 deletions(

[PATCH 3.16 55/87] KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST

wed-by: Andrew Jones Tested-by: Andrew Jones Signed-off-by: Marc Zyngier [bwh: Backported to 3.16: - Don't add unused vcpu parameter - Adjust context] Signed-off-by: Ben Hutchings --- --- a/arch/arm64/kvm/guest.c +++ b/arch/arm64/kvm/guest.c @@ -46,9 +46,8 @@ static u64 core_reg_offset_from_id(u64

[PATCH 3.16 49/87] can: flexcan: fix timeout when set small bitrate

Reviewed-by: Dong Aisheng Signed-off-by: Marc Kleine-Budde [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/net/can/flexcan.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/net/can/flexcan.c +++ b/drivers/net/can/flexcan.c @@ -157,7 +157,7

[PATCH 3.16 53/87] ptrace: restore smp_rmb() in __ptrace_may_access()

Signed-off-by: Ben Hutchings --- kernel/cred.c | 9 + kernel/ptrace.c | 10 ++ 2 files changed, 19 insertions(+) --- a/kernel/cred.c +++ b/kernel/cred.c @@ -439,6 +439,15 @@ int commit_creds(struct cred *new) if (task->mm) set_dump

[PATCH 3.16 47/87] net: rds: fix memory leak in rds_ib_flush_mr_pool

Fixes: 1bc144b62524 ("net, rds, Replace xlist in net/rds/xlist.h with llist") Signed-off-by: Zhu Yanjun Acked-by: Santosh Shilimkar Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/rds/ib_rdma.c | 10 ++ 1 file changed, 6 insertions(+), 4 deletions(-)

[PATCH 3.16 73/87] scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()

d-by: Ewan D. Milne Signed-off-by: Martin K. Petersen Signed-off-by: Ben Hutchings --- drivers/scsi/vmw_pvscsi.c | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) --- a/drivers/scsi/vmw_pvscsi.c +++ b/drivers/scsi/vmw_pvscsi.c @@ -754,6 +754,7 @@ static int pvscsi_queue_lck(struct scsi_

[PATCH 3.16 75/87] be2net: fix link failure after ethtool offline test

failure after offline test. Patch adds a loop that waits for a link setup finish. Changes in v2: - added fixes header Fixes: 4276e47e2d1c ("be2net: Add link test to list of ethtool self tests.") Signed-off-by: Petr Oros Reviewed-by: Ivan Vecera Signed-off-by: David S. Miller Signed-o

[PATCH 3.16 09/87] USB: rio500: fix memory leak in close after disconnect

-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/usb/misc/rio500.c | 17 +++-- 1 file changed, 15 insertions(+), 2 deletions(-) --- a/drivers/usb/misc/rio500.c +++ b/drivers/usb/misc/rio500.c @@ -103,9 +103,22 @@ static int close_rio(struct inode *inode { struct

[PATCH 3.16 83/87] ALSA: seq: fix incorrect order of dest_client/dest_ports arguments

are in the wrong order. Fix this by swapping them around. Addresses-Coverity: ("Arguments in wrong order") Signed-off-by: Colin Ian King Signed-off-by: Takashi Iwai Signed-off-by: Ben Hutchings --- sound/core/seq/oss/seq_oss_ioctl.c | 2 +- sound/core/seq/oss/seq_oss_rw.c| 2 +- 2 files

[PATCH 3.16 80/87] bonding: Always enable vlan tx offload

nding: propogate vlan_features to bonding master") Suggested-by: Jiri Pirko Signed-off-by: YueHaibing Acked-by: Jiri Pirko Signed-off-by: David S. Miller [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/net/bonding/bond_main.c | 2 +- 1 file changed, 1 inser

[PATCH 3.16 81/87] bonding: Add vlan tx offload to hw_enc_features

) Signed-off-by: YueHaibing Acked-by: Jay Vosburgh Signed-off-by: David S. Miller [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- --- a/drivers/net/bonding/bond_main.c +++ b/drivers/net/bonding/bond_main.c @@ -1083,7 +1083,9 @@ static void bond_compute_features(

[PATCH 3.16 00/87] 3.16.75-rc1 review

cs42xx8.c| 1 + 87 files changed, 683 insertions(+), 211 deletions(-) -- Ben Hutchings Design a system any fool can use, and only a fool will want to use it.

[PATCH 3.16 82/87] sctp: change to hold sk after auth shkey is created successfully

77a19977c0...@syzkaller.appspotmail.com Signed-off-by: Xin Long Acked-by: Neil Horman Signed-off-by: David S. Miller [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- net/sctp/endpointola.c | 8 1 file changed, 4 insertions(+), 4 deletions(-) --- a/net/sctp/endpointola.c

[PATCH 3.16 56/87] bcache: fix stack corruption by PRECEDING_KEY()

y: Pierre JUHEN Cc: Kent Overstreet Cc: Nix Signed-off-by: Jens Axboe Signed-off-by: Ben Hutchings --- drivers/md/bcache/bset.c | 16 +--- drivers/md/bcache/bset.h | 34 -- 2 files changed, 33 insertions(+), 17 deletions(-) --- a/drivers/md/bcache/bset

[PATCH 3.16 70/87] scsi: ufs: Avoid runtime suspend possibly being blocked forever

or UFS host controller driver) Signed-off-by: Stanley Chu Reviewed-by: Avri Altman Signed-off-by: Martin K. Petersen [bwh: Backported to 3.16: - ufshcd_pltrfm_probe() doesn't allocate or free the host structure - Adjust context] Signed-off-by: Ben Hutchings --- drivers/scsi/ufs/ufshcd-pltfrm.c |

[PATCH 3.16 68/87] apparmor: enforce nullbyte at end of tag string

olicy") Signed-off-by: Jann Horn Signed-off-by: John Johansen Signed-off-by: Ben Hutchings --- security/apparmor/policy_unpack.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/security/apparmor/policy_unpack.c +++ b/security/apparmor/policy_unpack.c @@ -177,7 +177,7 @@ static bool un

[PATCH 3.16 63/87] btrfs: start readahead also in seed devices

3.16.75-rc1 review patch. If anyone has any objections, please let me know. -- From: Naohiro Aota commit c4e0540d0ad49c8ceab06cceed1de27c4fe29f6e upstream. Currently, btrfs does not consult seed devices to start readahead. As a result, if readahead zone is added to the seed

[PATCH 3.16 74/87] x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz

Thomas Gleixner Cc: Borislav Petkov Cc: "H . Peter Anvin" Cc: kernel-janit...@vger.kernel.org Link: https://lkml.kernel.org/r/20190619181446.13635-1-colin.k...@canonical.com [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- arch/x86/kernel/apic/apic.c | 3 ++-

[PATCH 3.16 77/87] MIPS: Add missing EHB in mtc0 -> mfc0 sequence.

support was introduced.] Signed-off-by: Paul Burton Fixes: 3d8bfdd03072 ("MIPS: Use C0_KScratch (if present) to hold PGD pointer.") Fixes: 829dcc0a956a ("MIPS: Add MIPS P5600 probe support") Cc: linux-m...@vger.kernel.org [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben H

[PATCH 3.16 84/87] tracing/snapshot: Resize spare buffer if size changed

Eiichi Tsukata Signed-off-by: Steven Rostedt (VMware) [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- kernel/trace/trace.c | 10 ++ 1 file changed, 6 insertions(+), 4 deletions(-) --- a/kernel/trace/trace.c +++ b/kernel/trace/trace.c @@ -5102,11 +5102,13 @@ tra

[PATCH 3.16 71/87] net/af_iucv: remove GFP_DMA restriction for HiperTransport

Reviewed-by: Ursula Braun Reviewed-by: Hendrik Brueckner Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/iucv/af_iucv.c | 6 +- 1 file changed, 5 insertions(+), 1 deletion(-) --- a/net/iucv/af_iucv.c +++ b/net/iucv/af_iucv.c @@ -568,7 +568,6 @@ static struct sock *iucv_sock_

[PATCH 3.16 60/87] coredump: fix race condition between collapse_huge_page() and core dumping

: Backported to 3.16: - Don't set result variable; collapse_huge_range() returns void - Adjust filenames] Signed-off-by: Ben Hutchings --- --- a/include/linux/sched.h +++ b/include/linux/sched.h @@ -2439,6 +2439,10 @@ static inline void mmdrop(struct mm_stru * followed by taking the mmap_sem for

[PATCH 3.16 61/87] cfg80211: fix memory leak of wiphy device name

necessary to call put_device() (via wiphy_free()) to avoid a memory leak. Reported-by: syzbot+7fddca22578bc67c3...@syzkaller.appspotmail.com Fixes: 1f87f7d3a3b4 ("cfg80211: add rfkill support") Signed-off-by: Eric Biggers Signed-off-by: Johannes Berg Signed-off-by: Ben Hutchings --- ne

[PATCH 3.16 57/87] libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk

that these models are buggy in more then 1 way. Add NOLPM quirk to the existing quirks entry for BROKEN_FPDMA_AA. BugLink: https://bugzilla.redhat.com/show_bug.cgi?id=1571330 Reviewed-by: Martin K. Petersen Signed-off-by: Hans de Goede Signed-off-by: Jens Axboe Signed-off-by: Ben Hutchings --- drivers/ata

[PATCH 3.16 69/87] net: netem: fix backlog accounting for corrupted GSO frames

Signed-off-by: Jakub Kicinski Reviewed-by: Dirk van der Merwe Acked-by: Cong Wang Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/sched/sch_netem.c | 13 - 1 file changed, 8 insertions(+), 5 deletions(-) --- a/net/sched/sch_netem.c +++ b/net/sched/sch_netem.c

[PATCH 3.16 65/87] neigh: fix use-after-free read in pneigh_get_next

97f2a800: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc Fixes: 767e97e1e0db ("neigh: RCU conversion of struct neighbour") Signed-off-by: Eric Dumazet Reported-by: syzbot Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/core/neighbour.c | 7 +++ 1 file

[PATCH 3.16 67/87] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write

Reviewed-by: Pavel Shilovsky Signed-off-by: Ben Hutchings --- fs/cifs/smb2maperror.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/fs/cifs/smb2maperror.c +++ b/fs/cifs/smb2maperror.c @@ -455,7 +455,7 @@ static const struct status_to_posix_erro {STATUS_FILE_INVALID, -EIO

[PATCH 3.16 64/87] be2net: Fix number of Rx queues used for flow hashing

set RX flow hash configuration: Invalid argument Fixes: 594ad54a2c3b ("be2net: Add support for setting and getting rx flow hash options") Reported-by: Tianhao Signed-off-by: Ivan Vecera Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- drivers/net/ethernet/em

[PATCH 3.16 59/87] fs/ocfs2: fix race in ocfs2_dentry_attach_lock()

Ge Reviewed-by: Joseph Qi Cc: Mark Fasheh Cc: Joel Becker Cc: Junxiao Bi Cc: Gang He Cc: Jun Piao Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds Signed-off-by: Ben Hutchings --- fs/ocfs2/dcache.c | 12 1 file changed, 12 insertions(+) --- a/fs/ocfs2/dcache.c +++

[PATCH 3.16 62/87] Btrfs: fix race between readahead and device replace/removal

() and rcu_read_unlock() pair together with a list_for_each_entry_rcu() call because we end up doing calls to sleeping functions (kzalloc()) in the respective code path. Signed-off-by: Filipe Manana Reviewed-by: Josef Bacik Signed-off-by: Ben Hutchings --- fs/btrfs/reada.c | 2 ++ 1 file changed, 2

[PATCH 3.16 72/87] net/af_iucv: always register net_device notifier

Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- net/iucv/af_iucv.c | 27 --- 1 file changed, 20 insertions(+), 7 deletions(-) --- a/net/iucv/af_iucv.c +++ b/net/iucv/af_iucv.c @@ -2399,6 +2399,13 @@ out: return err; } +static void afiucv_iucv

[PATCH 3.16 66/87] perf/core: Fix perf_sample_regs_user() mm check

n Cc: Thomas Gleixner Fixes: 4018994f3d87 ("perf: Add ability to attach user level registers dump to sample") Signed-off-by: Ingo Molnar [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- kernel/events/core.c | 2 +- 1 file changed, 1 insertion(+), 1 deleti

[PATCH 3.16 87/87] crypto: user - prevent operating on larval algorithms

rspace configuration API") Cc: Steffen Klassert Signed-off-by: Eric Biggers Signed-off-by: Herbert Xu [bwh: Backported to 3.16: adjust filename] Signed-off-by: Ben Hutchings --- crypto/crypto_user.c | 3 +++ 1 file changed, 3 insertions(+) --- a/crypto/crypto_user.c +++ b/crypto/crypto_user.c

[PATCH 3.16 46/87] parisc: Use implicit space register selection for loading the coherence index of I/O pdirs

are disabled. This patch changes the code used to load the coherence index to use implicit space register selection. This saves one instruction and eliminates the race. Tested on rp3440, c8000 and c3750. Signed-off-by: John David Anglin Signed-off-by: Helge Deller Signed-off-by: Ben Hutchings

[PATCH 3.16 24/87] perf/ring_buffer: Fix exposing a temporarily decreased data_head

ner Cc: Vince Weaver Cc: mark.rutl...@arm.com Fixes: ef60777c9abd ("perf: Optimize the perf_output() path by removing IRQ-disables") Link: http://lkml.kernel.org/r/20190517115418.224478...@infradead.org Signed-off-by: Ingo Molnar Signed-off-by: Ben Hutchings --- k

[PATCH 3.16 86/87] lib/mpi: Fix karactx leak in mpi_powm

Reviewed-by: Eric Biggers Signed-off-by: Herbert Xu Signed-off-by: Ben Hutchings --- lib/mpi/mpi-pow.c | 6 ++ 1 file changed, 2 insertions(+), 4 deletions(-) --- a/lib/mpi/mpi-pow.c +++ b/lib/mpi/mpi-pow.c @@ -36,6 +36,7 @@ int mpi_powm(MPI res, MPI base, MPI exp, MPI mod) {

[PATCH 3.16 79/87] cpu/speculation: Warn on unsupported mitigations= parameter

. Fixes: 98af8452945c5565 ("cpu/speculation: Add 'mitigations=' cmdline option") Signed-off-by: Geert Uytterhoeven Signed-off-by: Thomas Gleixner Acked-by: Josh Poimboeuf Cc: Peter Zijlstra Cc: Jiri Kosina Cc: Greg Kroah-Hartman Cc: Ben Hutchings Link: https://lkml.ke

[PATCH 3.16 25/87] perf/ring_buffer: Add ordering to rb->nest increment

f: Optimize the perf_output() path by removing IRQ-disables") Link: http://lkml.kernel.org/r/20190517115418.309516...@infradead.org Signed-off-by: Ingo Molnar Signed-off-by: Ben Hutchings --- kernel/events/ring_buffer.c | 9 + 1 file changed, 9 insertions(+) --- a/kernel/events/ring_buffer.c +++

[PATCH 3.16 18/87] igmp: acquire pmc lock for ip_mc_clear_src()

itself, this spinlock could actually ensure we don't access them in parallel. Thanks to Eric and Long for discussion on this bug. Reported-by: Andrey Konovalov Cc: Eric Dumazet Cc: Xin Long Signed-off-by: Cong Wang Reviewed-by: Xin Long Signed-off-by: David S. Miller Signed-off-by: Ben Hut

[PATCH 3.16 26/87] gpio: fix gpio-adp5588 build errors

kernel.org Reviewed-by: Bartosz Golaszewski Acked-by: Michael Hennerich Signed-off-by: Linus Walleij Signed-off-by: Ben Hutchings --- drivers/gpio/Kconfig | 1 + 1 file changed, 1 insertion(+) --- a/drivers/gpio/Kconfig +++ b/drivers/gpio/Kconfig @@ -654,6 +654,7 @@ config GPIO_ADP5588 conf

[PATCH 3.16 32/87] configfs: Fix use-after-free when accessing sd->s_dentry

es/kernel/fs/racer/fs_racer_file_list.sh) Fixes: 76ae281f6307 ('configfs: fix race between dentry put and lookup') Signed-off-by: Sahitya Tummala Signed-off-by: Christoph Hellwig Signed-off-by: Ben Hutchings --- fs/configfs/dir.c | 14 ++ 1 file changed, 6 insertions(+), 8 deletions(-)

[PATCH 3.16 78/87] x86/speculation: Allow guests to use SSBD even if host does not

0187210-11054-1-git-send-email-alejandro.j.jime...@oracle.com Signed-off-by: Ben Hutchings --- arch/x86/kernel/cpu/bugs.c | 11 ++- 1 file changed, 10 insertions(+), 1 deletion(-) --- a/arch/x86/kernel/cpu/bugs.c +++ b/arch/x86/kernel/cpu/bugs.c @@ -960,6 +960,16 @@ static enu

[PATCH 3.16 76/87] perf/ioctl: Add check for the sample_period value

riod to 63 bits") Link: https://lkml.kernel.org/r/20190604042953.914-1-ravi.bango...@linux.ibm.com Signed-off-by: Ingo Molnar [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- kernel/events/core.c | 3 +++ 1 file changed, 3 insertions(+) --- a/kernel/events/core.c

[PATCH 3.16 44/87] s390/qeth: fix VLAN attribute in bridge_hostnotify udev event

Alexandra Winter Signed-off-by: Julian Wiedmann Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- drivers/s390/net/qeth_l2_main.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/s390/net/qeth_l2_main.c +++ b/drivers/s390/net/qeth_l2_main.c @@ -1956,7 +1956,7 @@ s

[PATCH 3.16 50/87] can: af_can: Fix error path of can_init()

Signed-off-by: Ben Hutchings --- --- a/net/can/af_can.c +++ b/net/can/af_can.c @@ -899,6 +899,8 @@ static struct notifier_block can_netdev_ static __init int can_init(void) { + int err; + /* check for correct padding to be able to use the structs similarly */ BUILD_BUG_O

[PATCH 3.16 28/87] net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()

pport") Signed-off-by: Kees Cook Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- drivers/net/ethernet/dec/tulip/de4x5.c | 1 - 1 file changed, 1 deletion(-) --- a/drivers/net/ethernet/dec/tulip/de4x5.c +++ b/drivers/net/ethernet/dec/tulip/de4x5.c @@ -2107,7 +2107,6 @@ sta

[PATCH 3.16 54/87] i2c: acorn: fix i2c warning

resulting in the RTC being inaccessible. Fix this. Fixes: 2236baa75f70 ("i2c: Sanity checks on adapter registration") Signed-off-by: Russell King Signed-off-by: Wolfram Sang Signed-off-by: Ben Hutchings --- drivers/i2c/busses/i2c-acorn.c | 1 + 1 file changed, 1 insertion(+) --- a/dr

[PATCH 3.16 85/87] scsi: target/iblock: Fix overrun in WRITE SAME emulation

rsen [bwh: Backported to 3.16: use IBLOCK_LBA_SHIFT instead of SECTOR_SHIFT] Signed-off-by: Ben Hutchings --- drivers/target/target_core_iblock.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/target/target_core_iblock.c +++ b/drivers/target/target_core_iblock.c @@ -49

[PATCH 3.16 06/87] USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor

lan Stern Reported-and-tested-by: syzbot+71f1e64501a309fcc...@syzkaller.appspotmail.com Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/usb/core/config.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/drivers/usb/core/config.c +++ b/drivers/usb/core

[PATCH 3.16 29/87] staging: iio: cdc: Don't put an else right after a return

at it, remove new line for symmetry with the rest of the code. Signed-off-by: Catalina Mocanu Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/staging/iio/cdc/ad7150.c | 10 +++--- 1 file changed, 3 insertions(+), 7 deletions(-) --- a/drivers/staging/iio/cdc

[PATCH 3.16 17/87] net: stmmac: fix reset gpio free missing

rted to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/net/ethernet/stmicro/stmmac/stmmac_mdio.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) --- a/drivers/net/ethernet/stmicro/stmmac/stmmac_mdio.c +++ b/drivers/net/ethernet/stmicro/stmmac/stmmac_mdio.c @@

Re: [PATCH 3.16 000/132] 3.16.74-rc1 review

On Fri, 2019-09-20 at 18:35 -0700, Guenter Roeck wrote: > On 9/20/19 2:16 PM, Ben Hutchings wrote: > > On Fri, 2019-09-20 at 13:04 -0700, Guenter Roeck wrote: > > > On Fri, Sep 20, 2019 at 03:23:34PM +0100, Ben Hutchings wrote: > > > > This is the start of the stabl

Re: [PATCH 3.16 114/132] ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term

4.9. Debian's packages are built with gcc 4.8 (arm) or 4.9 (x86). Guenter Roeck does build and boot tests on multiple architectures using a variety of (mostly quite recent) compiler versions. Ben. -- Ben Hutchings If the facts do not conform to your theory, they must be disposed of. signature.

Re: [PATCH 3.16 000/132] 3.16.74-rc1 review

On Fri, 2019-09-20 at 13:04 -0700, Guenter Roeck wrote: > On Fri, Sep 20, 2019 at 03:23:34PM +0100, Ben Hutchings wrote: > > This is the start of the stable review cycle for the 3.16.74 release. > > There are 132 patches in this series, which will be posted as responses > > to

[PATCH 3.16 012/132] media: davinci-isif: avoid uninitialized variable use

Signed-off-by: Mauro Carvalho Chehab Signed-off-by: Ben Hutchings --- drivers/media/platform/davinci/isif.c | 9 - 1 file changed, 9 deletions(-) --- a/drivers/media/platform/davinci/isif.c +++ b/drivers/media/platform/davinci/isif.c @@ -890,9 +890,7 @@ static int isif_set_hw_if_params(stru

[PATCH 3.16 021/132] PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum

regardless of CONFIG_PCIEASPM] Signed-off-by: Bjorn Helgaas Reviewed-by: Andy Shevchenko [bwh: Backported to 3.16: - Use dev_info() instead of pci_info() - Adjust context] Signed-off-by: Ben Hutchings --- drivers/pci/pcie/aspm.c | 9 + drivers/pci/quirks.c| 17 + include

[PATCH 3.16 025/132] scsi: qla2xxx: Unregister chrdev if module initialization fails

. Additionally, avoid duplicating error path code. Cc: Himanshu Madhani Cc: Giridhar Malavali Fixes: 6a03b4cd78f3 ("[SCSI] qla2xxx: Add char device to increase driver use count") # v2.6.35. Signed-off-by: Bart Van Assche Signed-off-by: Martin K. Petersen Signed-off-by: Ben Hutchings --

[PATCH 3.16 015/132] cxgb3/l2t: Fix undefined behaviour

by: Gustavo A. R. Silva Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/net/ethernet/chelsio/cxgb3/l2t.h +++ b/drivers/net/ethernet/chelsio/cxgb3/l2t.h @@ -75,8 +

[PATCH 3.16 011/132] tty/vt: fix write/write race in ioctl(KDSKBSENT) handler

ps://lkml.org/lkml/2019/2/17/256 Signed-off-by: Sergei Trofimovich Signed-off-by: Greg Kroah-Hartman Signed-off-by: Ben Hutchings --- drivers/tty/vt/keyboard.c | 33 +++-- 1 file changed, 27 insertions(+), 6 deletions(-) --- a/drivers/tty/vt/keyboard.c +++ b/drivers/tt

[PATCH 3.16 020/132] PCI: Factor out pcie_retrain_link() function

-by: Stefan Mätje Signed-off-by: Bjorn Helgaas Reviewed-by: Andy Shevchenko Signed-off-by: Ben Hutchings --- drivers/pci/pcie/aspm.c | 40 1 file changed, 24 insertions(+), 16 deletions(-) --- a/drivers/pci/pcie/aspm.c +++ b/drivers/pci/pcie/aspm.c @@ -175,6

[PATCH 3.16 016/132] drm/fb-helper: dpms_legacy(): Only set on connectors in use

ed to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/gpu/drm/drm_fb_helper.c | 11 +-- 1 file changed, 5 insertions(+), 6 deletions(-) --- a/drivers/gpu/drm/drm_fb_helper.c +++ b/drivers/gpu/drm/drm_fb_helper.c @@ -453,8 +453,8 @@ static void drm_fb_helper_dpms

[PATCH 3.16 009/132] scsi: qla4xxx: avoid freeing unallocated dma memory

4xxx: Boot from SAN support for open-iscsi") Signed-off-by: Arnd Bergmann Reviewed-by: Nathan Chancellor Signed-off-by: Martin K. Petersen Signed-off-by: Ben Hutchings --- drivers/scsi/qla4xxx/ql4_os.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/scsi/qla4xxx/ql4

[PATCH 3.16 019/132] ehea: Fix a copy-paste err in ehea_init_port_res

uot;ehea: Fixing statistics") Signed-off-by: YueHaibing Reviewed-by: Mukesh Ojha Signed-off-by: David S. Miller Signed-off-by: Ben Hutchings --- drivers/net/ethernet/ibm/ehea/ehea_main.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/net/ethernet/ibm/ehea/ehea_main.c +++

[PATCH 3.16 026/132] arm64: compat: Reduce address limit

me] Signed-off-by: Ben Hutchings --- arch/arm64/include/asm/memory.h | 8 1 file changed, 8 insertions(+) --- a/arch/arm64/include/asm/memory.h +++ b/arch/arm64/include/asm/memory.h @@ -53,7 +53,15 @@ #define TASK_SIZE_64 (UL(1) << VA_BITS) #ifdef CONFI

[PATCH 3.16 018/132] rtc: don't reference bogus function pointer in kdoc

. Fixes: 51ba60c5bb3b ("RTC: Cleanup rtc_class_ops->update_irq_enable()") Signed-off-by: Wolfram Sang Signed-off-by: Alexandre Belloni Signed-off-by: Ben Hutchings --- drivers/rtc/interface.c | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) --- a/drivers/rtc/inte

[PATCH 3.16 022/132] jbd2: check superblock mapped prior to committing

superblock's buffer head prior to submitting. Reported-by: Eric Ren Signed-off-by: Jiufei Xue Signed-off-by: Theodore Ts'o Reviewed-by: Jan Kara [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- fs/jbd2/journal.c | 4 1 file changed, 4 insertions(+) --- a/fs

[PATCH 3.16 028/132] hwmon: (f71805f) Use request_muxed_region for Super-IO accesses

is supported, and to ensure that access by multiple drivers is synchronized. Fixes: e53004e20a58e ("hwmon: New f71805f driver") Reported-by: Kefeng Wang Reported-by: John Garry Cc: John Garry Acked-by: John Garry Signed-off-by: Guenter Roeck Signed-off-by: Ben Hutchings --- drivers/hwmon/f718

[PATCH 3.16 032/132] hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses

mbers") Signed-off-by: Guenter Roeck Signed-off-by: Ben Hutchings --- drivers/hwmon/w83627hf.c | 42 +++- 1 file changed, 37 insertions(+), 5 deletions(-) --- a/drivers/hwmon/w83627hf.c +++ b/drivers/hwmon/w83627hf.c @@ -130,17 +130,23 @@ superio_sel

[PATCH 3.16 035/132] platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer

("platform/x86: alienware-wmi: Correct a memory leak") Signed-off-by: Colin Ian King Signed-off-by: Darren Hart (VMware) [bwh: Backported to 3.16: adjust context] Signed-off-by: Ben Hutchings --- drivers/platform/x86/alienware-wmi.c | 17 - 1 file changed, 8 insert

<    1   2   3   4   5   6   7   8   9   10   >