[PATCH 4.6 89/96] libata: LITE-ON CX1-JB256-HP needs lower max_sectors

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit 1488a1e3828d60d74c9b802a05e24c0487babe4e upstream. Since 34b48db66e08 ("block: remove artifical max_hw_sectors cap"), max_sectors is no longer limited to BLK_DEF_MAX_SECTORS

[PATCH 4.6 79/96] irqchip/mips-gic: Match IPI IRQ domain by bus token only

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Paul Burton commit 547aefc4db877e65245c3d95fcce703701bf3a0c upstream. Commit fbde2d7d8290 ("MIPS: Add generic SMP IPI support") introduced code which calls irq_find_matching_host with a NULL

[PATCH 4.6 81/96] SCSI: fix new bug in scsi_dev_info_list string matching

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Alan Stern commit 5e7ff2ca7f2da55fe777167849d0c93403bd0dc8 upstream. Commit b704f70ce200 ("SCSI: fix bug in scsi_dev_info_list matching") changed the way vendor- and model-string matching was

[PATCH 4.6 96/96] vfs: fix deadlock in file_remove_privs() on overlayfs

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Miklos Szeredi commit c1892c37769cf89c7e7ba57528ae2ccb5d153c9b upstream. file_remove_privs() is called with inode lock on file_inode(), which proceeds to calling notify_change() on

[PATCH 4.6 93/96] intel_th: pci: Add Kaby Lake PCH-H support

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Shishkin commit 7a1a47ce35821b40f5b2ce46379ba14393bc3873 upstream. This adds Intel(R) Trace Hub PCI ID for Kaby Lake PCH-H. Signed-off-by: Alexander Shishkin Signed-off-by: Greg

[PATCH 4.6 85/96] cpu/hotplug: Keep enough storage space if SMP=n to avoid array out of bounds scribble

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Thomas Gleixner commit a7c734140aa36413944eef0f8c660e0e2256357d upstream. Xiaolong Ye reported lock debug warnings triggered by the following commit: 8de4a0066106 ("perf/x86: Convert the

[PATCH 4.6 90/96] libceph: apply new_state before new_up_client on incrementals

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Ilya Dryomov commit 930c532869774ebf8af9efe9484c597f896a7d46 upstream. Currently, osd_weight and osd_state fields are updated in the encoding order. This is wrong, because

[PATCH 4.6 42/96] Revert "Input: wacom_w8001 - drop use of ABS_MT_TOOL_TYPE"

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Torokhov commit 3e9161bfe0482f26efeaf584d5fd69398c69313c upstream. This reverts commit 5f7e5445a2de848c66d2d80ba5479197e8287c33 because removal of

[PATCH 4.6 45/96] pvclock: Add CPU barriers to get correct version value

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Minfei Huang commit 749d088b8e7f4b9826ede02b9a043e417fa84aa1 upstream. Protocol for the "version" fields is: hypervisor raises it (making it uneven) before it starts

[PATCH 4.6 40/96] Input: wacom_w8001 - ignore invalid pen data packets

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Ping Cheng commit 9e72ac7492149a229ce9039c680849cb682d7092 upstream. ThinkPad X60 Tablet PC (pen only device) sometime posts packets that are larger than

[PATCH 4.6 40/96] Input: wacom_w8001 - ignore invalid pen data packets

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Ping Cheng commit 9e72ac7492149a229ce9039c680849cb682d7092 upstream. ThinkPad X60 Tablet PC (pen only device) sometime posts packets that are larger than W8001_PKTLEN_TPCPEN. Reported-by:

[PATCH 4.6 45/96] pvclock: Add CPU barriers to get correct version value

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Minfei Huang commit 749d088b8e7f4b9826ede02b9a043e417fa84aa1 upstream. Protocol for the "version" fields is: hypervisor raises it (making it uneven) before it starts updating the fields and

[PATCH 4.6 90/96] libceph: apply new_state before new_up_client on incrementals

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Ilya Dryomov commit 930c532869774ebf8af9efe9484c597f896a7d46 upstream. Currently, osd_weight and osd_state fields are updated in the encoding order. This is wrong, because an incremental map

[PATCH 4.6 42/96] Revert "Input: wacom_w8001 - drop use of ABS_MT_TOOL_TYPE"

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Dmitry Torokhov commit 3e9161bfe0482f26efeaf584d5fd69398c69313c upstream. This reverts commit 5f7e5445a2de848c66d2d80ba5479197e8287c33 because removal of input_mt_report_slot_state() means we

[PATCH 4.4 10/68] fs/nilfs2: fix potential underflow in call to crc32_le

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Torsten Hilbrich commit 63d2f95d63396059200c391ca87161897b99e74a upstream. The value `bytes' comes from the filesystem which is about to be mounted. We cannot

[PATCH 4.4 10/68] fs/nilfs2: fix potential underflow in call to crc32_le

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Torsten Hilbrich commit 63d2f95d63396059200c391ca87161897b99e74a upstream. The value `bytes' comes from the filesystem which is about to be mounted. We cannot trust that the value is always

[PATCH 4.6 17/96] mm, meminit: ensure node is online before checking whether pages are uninitialised

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Mel Gorman commit ef70b6f41cda6270165a6f27b2548ed31cfa3cb2 upstream. early_page_uninitialised looks up an arbitrary PFN. While a machine without node 0 will boot

[PATCH 4.6 11/96] mm/swap.c: flush lru pvecs on compound page arrival

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Lukasz Odzioba commit 8f182270dfec432e93fae14f9208a6b9af01009f upstream. Currently we can have compound pages held on per cpu pagevecs, which leads to a lot of memory

[PATCH 4.6 51/96] power_supply: power_supply_read_temp only if use_cnt > 0

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Rhyland Klein commit 5bc28b93a36e3cb3acc2870fb75cb6ffb182fece upstream. Change power_supply_read_temp() to use power_supply_get_property() so that it will check the use_cnt

[PATCH 4.6 54/96] ecryptfs: dont allow mmap when the lower fs doesnt support it

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Jeff Mahoney commit f0fe970df3838c202ef6c07a4c2b36838ef0a88b upstream. There are legitimate reasons to disallow mmap on certain files, notably in sysfs or procfs. We shouldn't

[PATCH 4.6 75/96] can: fix handling of unmodifiable configuration options fix

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Hartkopp commit bce271f255dae8335dc4d2ee2c4531e09cc67f5a upstream. With upstream commit bb208f144cf3f59 (can: fix handling of unmodifiable configuration options)

[PATCH 4.6 58/96] devpts: fix null pointer dereference on failed memory allocation

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Colin Ian King commit 5353ed8deedee9e5acb9f896e9032158f5d998de upstream. An ENOMEM when creating a pair tty in tty_ldisc_setup causes a null pointer dereference in

[PATCH 4.6 53/96] Revert "ecryptfs: forbid opening files without mmap handler"

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Jeff Mahoney commit 78c4e172412de5d0456dc00d2b34050aa0b683b5 upstream. This reverts commit 2f36db71009304b3f0b95afacd8eba1f9f046b87. It fixed a local root exploit but also

[PATCH 4.6 49/96] cgroup: set css->id to -1 during init

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit 8fa3b8d689a54d6d04ff7803c724fb7aca6ce98e upstream. If percpu_ref initialization fails during css_create(), the free path can end up trying to free css->id of

[PATCH 4.6 28/96] xen-blkfront: save uncompleted reqs in blkfront_resume()

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Bob Liu commit 7b427a59538a98161321aa46c13f4ea81b43f4eb upstream. Uncompleted reqs used to be 'saved and resubmitted' in blkfront_recover() during migration, but that's too

[PATCH 4.6 17/96] mm, meminit: ensure node is online before checking whether pages are uninitialised

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Mel Gorman commit ef70b6f41cda6270165a6f27b2548ed31cfa3cb2 upstream. early_page_uninitialised looks up an arbitrary PFN. While a machine without node 0 will boot with "mm, page_alloc: Always

[PATCH 4.6 11/96] mm/swap.c: flush lru pvecs on compound page arrival

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Lukasz Odzioba commit 8f182270dfec432e93fae14f9208a6b9af01009f upstream. Currently we can have compound pages held on per cpu pagevecs, which leads to a lot of memory unavailable for reclaim

[PATCH 4.6 51/96] power_supply: power_supply_read_temp only if use_cnt > 0

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Rhyland Klein commit 5bc28b93a36e3cb3acc2870fb75cb6ffb182fece upstream. Change power_supply_read_temp() to use power_supply_get_property() so that it will check the use_cnt and ensure it is >

[PATCH 4.6 54/96] ecryptfs: dont allow mmap when the lower fs doesnt support it

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Jeff Mahoney commit f0fe970df3838c202ef6c07a4c2b36838ef0a88b upstream. There are legitimate reasons to disallow mmap on certain files, notably in sysfs or procfs. We shouldn't emulate mmap

[PATCH 4.6 75/96] can: fix handling of unmodifiable configuration options fix

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Hartkopp commit bce271f255dae8335dc4d2ee2c4531e09cc67f5a upstream. With upstream commit bb208f144cf3f59 (can: fix handling of unmodifiable configuration options) a new can_validate()

[PATCH 4.6 58/96] devpts: fix null pointer dereference on failed memory allocation

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Colin Ian King commit 5353ed8deedee9e5acb9f896e9032158f5d998de upstream. An ENOMEM when creating a pair tty in tty_ldisc_setup causes a null pointer dereference in devpts_kill_index because

[PATCH 4.6 53/96] Revert "ecryptfs: forbid opening files without mmap handler"

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Jeff Mahoney commit 78c4e172412de5d0456dc00d2b34050aa0b683b5 upstream. This reverts commit 2f36db71009304b3f0b95afacd8eba1f9f046b87. It fixed a local root exploit but also introduced a

[PATCH 4.6 49/96] cgroup: set css->id to -1 during init

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit 8fa3b8d689a54d6d04ff7803c724fb7aca6ce98e upstream. If percpu_ref initialization fails during css_create(), the free path can end up trying to free css->id of zero. As ID 0 is

[PATCH 4.6 28/96] xen-blkfront: save uncompleted reqs in blkfront_resume()

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Bob Liu commit 7b427a59538a98161321aa46c13f4ea81b43f4eb upstream. Uncompleted reqs used to be 'saved and resubmitted' in blkfront_recover() during migration, but that's too late after

[PATCH 4.6 09/96] memcg: mem_cgroup_migrate() may be called with irq disabled

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit d93c4130a7d049b234b5d5a15808eaf5406f2789 upstream. mem_cgroup_migrate() uses local_irq_disable/enable() but can be called with irq disabled from

[PATCH 4.6 64/96] clk: at91: fix clk_programmable_set_parent()

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Boris Brezillon commit f96423f483b1a7854270335b319e8d1cdd6f3585 upstream. Since commit 1bdf02326b71e ("clk: at91: make use of syscon/regmap internally"),

[PATCH 4.6 46/96] pinctrl: single: Fix missing flush of posted write for a wakeirq

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit 0ac3c0a4025f41748a083bdd4970cb3ede802b15 upstream. With many repeated suspend resume cycles, the pin specific wakeirq may not always work on omaps. This

[PATCH 4.6 63/96] clk: rockchip: initialize flags of clk_init_data in mmc-phase clock

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Heiko Stuebner commit 595144c1141c951a3c6bb9004ae6a2bc29aad66f upstream. The flags element of clk_init_data was never initialized for mmc- phase-clocks resulting in the

[PATCH 4.6 12/96] mm, compaction: abort free scanner if split fails

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: David Rientjes commit a4f04f2c6955aff5e2c08dcb40aca247ff4d7370 upstream. If the memory compaction free scanner cannot successfully split a free page (only possible due to

[PATCH 4.6 07/96] dmaengine: at_xdmac: double FIFO flush needed to compute residue

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Ludovic Desroches commit 9295c41d77ca93aac79cfca6fa09fa1ca5cab66f upstream. Due to the way CUBC register is updated, a double flush is needed to compute an

[PATCH 4.6 25/96] arc: unwind: warn only once if DW2_UNWIND is disabled

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Alexey Brodkin commit 9bd54517ee86cb164c734f72ea95aeba4804f10b upstream. If CONFIG_ARC_DW2_UNWIND is disabled every time arc_unwind_core() gets called following

[PATCH 4.6 05/96] dmaengine: at_xdmac: align descriptors on 64 bits

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Ludovic Desroches commit 4a9723e8df68cfce4048517ee32e37f78854b6fb upstream. Having descriptors aligned on 64 bits allows update CNDA and CUBC in an atomic way.

[PATCH 4.6 15/96] uapi: export lirc.h header

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Mauro Carvalho Chehab commit 12cb22bb8ae9aff9d72a9c0a234f26d641b20eb6 upstream. This header contains the userspace API for lirc. This is a fixup for commit

[PATCH 4.6 32/96] xen-blkfront: dont call talk_to_blkback when already connected to blkback

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Bob Liu commit efd1535270c1deb0487527bf0c3c827301a69c93 upstream. Sometimes blkfront may twice receive blkback_changed() notification (XenbusStateConnected) after

[PATCH 4.6 46/96] pinctrl: single: Fix missing flush of posted write for a wakeirq

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit 0ac3c0a4025f41748a083bdd4970cb3ede802b15 upstream. With many repeated suspend resume cycles, the pin specific wakeirq may not always work on omaps. This is because the

[PATCH 4.6 63/96] clk: rockchip: initialize flags of clk_init_data in mmc-phase clock

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Heiko Stuebner commit 595144c1141c951a3c6bb9004ae6a2bc29aad66f upstream. The flags element of clk_init_data was never initialized for mmc- phase-clocks resulting in the element containing a

[PATCH 4.6 12/96] mm, compaction: abort free scanner if split fails

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: David Rientjes commit a4f04f2c6955aff5e2c08dcb40aca247ff4d7370 upstream. If the memory compaction free scanner cannot successfully split a free page (only possible due to per-zone low

[PATCH 4.6 07/96] dmaengine: at_xdmac: double FIFO flush needed to compute residue

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Ludovic Desroches commit 9295c41d77ca93aac79cfca6fa09fa1ca5cab66f upstream. Due to the way CUBC register is updated, a double flush is needed to compute an accurate residue. First flush aim is

[PATCH 4.6 25/96] arc: unwind: warn only once if DW2_UNWIND is disabled

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Alexey Brodkin commit 9bd54517ee86cb164c734f72ea95aeba4804f10b upstream. If CONFIG_ARC_DW2_UNWIND is disabled every time arc_unwind_core() gets called following message gets printed in debug

[PATCH 4.6 05/96] dmaengine: at_xdmac: align descriptors on 64 bits

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Ludovic Desroches commit 4a9723e8df68cfce4048517ee32e37f78854b6fb upstream. Having descriptors aligned on 64 bits allows update CNDA and CUBC in an atomic way. Signed-off-by: Ludovic

[PATCH 4.6 09/96] memcg: mem_cgroup_migrate() may be called with irq disabled

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Tejun Heo commit d93c4130a7d049b234b5d5a15808eaf5406f2789 upstream. mem_cgroup_migrate() uses local_irq_disable/enable() but can be called with irq disabled from migrate_page_copy(). This

[PATCH 4.6 64/96] clk: at91: fix clk_programmable_set_parent()

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Boris Brezillon commit f96423f483b1a7854270335b319e8d1cdd6f3585 upstream. Since commit 1bdf02326b71e ("clk: at91: make use of syscon/regmap internally"), clk_programmable_set_parent() is

[PATCH 4.6 32/96] xen-blkfront: dont call talk_to_blkback when already connected to blkback

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Bob Liu commit efd1535270c1deb0487527bf0c3c827301a69c93 upstream. Sometimes blkfront may twice receive blkback_changed() notification (XenbusStateConnected) after migration, which will cause

[PATCH 4.6 15/96] uapi: export lirc.h header

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Mauro Carvalho Chehab commit 12cb22bb8ae9aff9d72a9c0a234f26d641b20eb6 upstream. This header contains the userspace API for lirc. This is a fixup for commit b7be755733dc ("[media] bz#75751:

[PATCH 4.6 27/96] xen/pciback: Fix conf_space read/write overlap check.

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Andrey Grodzovsky commit 02ef871ecac290919ea0c783d05da7eedeffc10e upstream. Current overlap check is evaluating to false a case where a filter field is fully contained

[PATCH 4.6 27/96] xen/pciback: Fix conf_space read/write overlap check.

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Andrey Grodzovsky commit 02ef871ecac290919ea0c783d05da7eedeffc10e upstream. Current overlap check is evaluating to false a case where a filter field is fully contained (proper subset) of a r/w

[PATCH 4.6 13/96] fs/nilfs2: fix potential underflow in call to crc32_le

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Torsten Hilbrich commit 63d2f95d63396059200c391ca87161897b99e74a upstream. The value `bytes' comes from the filesystem which is about to be mounted. We cannot

[PATCH 4.6 70/96] mmc: block: fix free of uninitialized idata->buf

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Ville Viinikka commit bfe5b1b1e013f7b1c0fd2ac3b3c8c380114b3fb9 upstream. Set 'idata->buf' to NULL so that it never gets returned without initialization. This fixes a bug

[PATCH 4.6 29/96] xenbus: dont BUG() on user mode induced condition

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Jan Beulich commit 0beef634b86a1350c31da5fcc2992f0d7c8a622b upstream. Inability to locate a user mode specified transaction ID should not lead to a kernel crash. For other

[PATCH 4.6 62/96] spi: sun4i: fix FIFO limit

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Michal Suchanek commit 6d9fe44bd73d567d04d3a68a2d2fa521ab9532f2 upstream. When testing SPI without DMA I noticed that filling the FIFO on the spi controller causes timeout.

[PATCH 4.6 19/96] mm: thp: refix false positive BUG in page_move_anon_rmap()

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Hugh Dickins commit 5a49973d7143ebbabd76e1dcd69ee42e349bb7b9 upstream. The VM_BUG_ON_PAGE in page_move_anon_rmap() is more trouble than it's worth: the syzkaller fuzzer hit

[PATCH 4.6 70/96] mmc: block: fix free of uninitialized idata->buf

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Ville Viinikka commit bfe5b1b1e013f7b1c0fd2ac3b3c8c380114b3fb9 upstream. Set 'idata->buf' to NULL so that it never gets returned without initialization. This fixes a bug where

[PATCH 4.6 29/96] xenbus: dont BUG() on user mode induced condition

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Jan Beulich commit 0beef634b86a1350c31da5fcc2992f0d7c8a622b upstream. Inability to locate a user mode specified transaction ID should not lead to a kernel crash. For other than

[PATCH 4.6 62/96] spi: sun4i: fix FIFO limit

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Michal Suchanek commit 6d9fe44bd73d567d04d3a68a2d2fa521ab9532f2 upstream. When testing SPI without DMA I noticed that filling the FIFO on the spi controller causes timeout. Always leave room

[PATCH 4.6 13/96] fs/nilfs2: fix potential underflow in call to crc32_le

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Torsten Hilbrich commit 63d2f95d63396059200c391ca87161897b99e74a upstream. The value `bytes' comes from the filesystem which is about to be mounted. We cannot trust that the value is always

[PATCH 4.6 19/96] mm: thp: refix false positive BUG in page_move_anon_rmap()

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Hugh Dickins commit 5a49973d7143ebbabd76e1dcd69ee42e349bb7b9 upstream. The VM_BUG_ON_PAGE in page_move_anon_rmap() is more trouble than it's worth: the syzkaller fuzzer hit it again. It's

[PATCH 4.6 20/96] mm: memcontrol: fix cgroup creation failure after many small jobs

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Weiner commit 73f576c04b9410ed19660f74f97521bee6e1c546 upstream. The memory controller has quite a bit of state that usually outlives the cgroup and pins its CSS

[PATCH 4.6 20/96] mm: memcontrol: fix cgroup creation failure after many small jobs

2016-08-08 Thread Greg Kroah-Hartman
4.6-stable review patch. If anyone has any objections, please let me know. -- From: Johannes Weiner commit 73f576c04b9410ed19660f74f97521bee6e1c546 upstream. The memory controller has quite a bit of state that usually outlives the cgroup and pins its CSS until said state

[PATCH 3.14 09/21] pinctrl: single: Fix missing flush of posted write for a wakeirq

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit 0ac3c0a4025f41748a083bdd4970cb3ede802b15 upstream. With many repeated suspend resume cycles, the pin specific wakeirq may not always work on omaps. This

[PATCH 3.14 21/21] net: mvneta: set real interrupt per packet for tx_done

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Dmitri Epshtein commit 06708f81528725148473c0869d6af5f809c6824b upstream. Commit aebea2ba0f74 ("net: mvneta: fix Tx interrupt delay") intended to set coalescing threshold to

[PATCH 3.14 07/21] Input: wacom_w8001 - w8001_MAX_LENGTH should be 13

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Ping Cheng commit 12afb34400eb2b301f06b2aa3535497d14faee59 upstream. Somehow the patch that added two-finger touch support forgot to update W8001_MAX_LENGTH from 11 to

[PATCH 3.14 21/21] net: mvneta: set real interrupt per packet for tx_done

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Dmitri Epshtein commit 06708f81528725148473c0869d6af5f809c6824b upstream. Commit aebea2ba0f74 ("net: mvneta: fix Tx interrupt delay") intended to set coalescing threshold to a value

[PATCH 3.14 07/21] Input: wacom_w8001 - w8001_MAX_LENGTH should be 13

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Ping Cheng commit 12afb34400eb2b301f06b2aa3535497d14faee59 upstream. Somehow the patch that added two-finger touch support forgot to update W8001_MAX_LENGTH from 11 to 13. Signed-off-by:

[PATCH 3.14 09/21] pinctrl: single: Fix missing flush of posted write for a wakeirq

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit 0ac3c0a4025f41748a083bdd4970cb3ede802b15 upstream. With many repeated suspend resume cycles, the pin specific wakeirq may not always work on omaps. This is because the

Re: [PATCH v2] libnvdimm, nd_blk: mask off reserved status bits

2016-08-08 Thread Ross Zwisler
On Tue, Aug 02, 2016 at 12:26:53PM -0600, Ross Zwisler wrote: > The "NVDIMM Block Window Driver Writer's Guide": > > http://pmem.io/documents/ > http://pmem.io/documents/NVDIMM_DriverWritersGuide-July-2016.pdf > > defines the layout of the block window status register. For the July 2016 >

[PATCH 3.14 17/21] can: fix handling of unmodifiable configuration options fix

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Hartkopp commit bce271f255dae8335dc4d2ee2c4531e09cc67f5a upstream. With upstream commit bb208f144cf3f59 (can: fix handling of unmodifiable configuration

Re: [PATCH v2] libnvdimm, nd_blk: mask off reserved status bits

2016-08-08 Thread Ross Zwisler
On Tue, Aug 02, 2016 at 12:26:53PM -0600, Ross Zwisler wrote: > The "NVDIMM Block Window Driver Writer's Guide": > > http://pmem.io/documents/ > http://pmem.io/documents/NVDIMM_DriverWritersGuide-July-2016.pdf > > defines the layout of the block window status register. For the July 2016 >

[PATCH 3.14 17/21] can: fix handling of unmodifiable configuration options fix

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Hartkopp commit bce271f255dae8335dc4d2ee2c4531e09cc67f5a upstream. With upstream commit bb208f144cf3f59 (can: fix handling of unmodifiable configuration options) a new can_validate()

[PATCH 3.14 13/21] ext4: verify extent header depth

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Vegard Nossum commit 7bc9491645118c9461bd21099c31755ff6783593 upstream. Although the extent tree depth of 5 should enough be for the worst case of 2*32 extents of

[PATCH 3.14 13/21] ext4: verify extent header depth

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Vegard Nossum commit 7bc9491645118c9461bd21099c31755ff6783593 upstream. Although the extent tree depth of 5 should enough be for the worst case of 2*32 extents of length 1, the extent tree

[PATCH 3.14 08/21] Input: xpad - validate USB endpoint count during probe

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Cameron Gutman commit caca925fca4fb30c67be88cacbe908eec6721e43 upstream. This prevents a malicious USB device from causing an oops. Signed-off-by: Cameron Gutman

[PATCH 3.14 03/21] xen/pciback: Fix conf_space read/write overlap check.

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Andrey Grodzovsky commit 02ef871ecac290919ea0c783d05da7eedeffc10e upstream. Current overlap check is evaluating to false a case where a filter field is fully contained

[PATCH 3.14 08/21] Input: xpad - validate USB endpoint count during probe

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Cameron Gutman commit caca925fca4fb30c67be88cacbe908eec6721e43 upstream. This prevents a malicious USB device from causing an oops. Signed-off-by: Cameron Gutman Signed-off-by: Dmitry

[PATCH 3.14 03/21] xen/pciback: Fix conf_space read/write overlap check.

2016-08-08 Thread Greg Kroah-Hartman
3.14-stable review patch. If anyone has any objections, please let me know. -- From: Andrey Grodzovsky commit 02ef871ecac290919ea0c783d05da7eedeffc10e upstream. Current overlap check is evaluating to false a case where a filter field is fully contained (proper subset) of a

[PATCH 4.4 36/68] locks: use file_inode()

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Miklos Szeredi commit 6343a2120862f7023006c8091ad95c1f16a32077 upstream. (Another one for the f_path debacle.) ltp fcntl33 testcase caused an Oops in

[PATCH 4.4 17/68] arc: unwind: warn only once if DW2_UNWIND is disabled

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alexey Brodkin commit 9bd54517ee86cb164c734f72ea95aeba4804f10b upstream. If CONFIG_ARC_DW2_UNWIND is disabled every time arc_unwind_core() gets called following

[PATCH 4.4 37/68] Revert "ecryptfs: forbid opening files without mmap handler"

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Jeff Mahoney commit 78c4e172412de5d0456dc00d2b34050aa0b683b5 upstream. This reverts commit 2f36db71009304b3f0b95afacd8eba1f9f046b87. It fixed a local root exploit but also

[PATCH 4.4 35/68] power_supply: power_supply_read_temp only if use_cnt > 0

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Rhyland Klein commit 5bc28b93a36e3cb3acc2870fb75cb6ffb182fece upstream. Change power_supply_read_temp() to use power_supply_get_property() so that it will check the use_cnt

[PATCH 4.4 32/68] pinctrl: single: Fix missing flush of posted write for a wakeirq

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit 0ac3c0a4025f41748a083bdd4970cb3ede802b15 upstream. With many repeated suspend resume cycles, the pin specific wakeirq may not always work on omaps. This

[PATCH 4.4 52/68] can: at91_can: RX queue could get stuck at high bus load

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Wolfgang Grandegger commit 43200a4480cbbe660309621817f54cbb93907108 upstream. At high bus load it could happen that "at91_poll()" enters with all RX message boxes filled

[PATCH 4.4 33/68] pinctrl: imx: Do not treat a PIN without MUX register as an error

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Shiyan commit ba562d5e54fd3136bfea0457add3675850247774 upstream. Some PINs do not have a MUX register, it is not an error. It is necessary to allow the continuation

[PATCH 4.4 48/68] mmc: block: fix packed command header endianness

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Taras Kondratiuk commit f68381a70bb2b26c31b13fdaf67c778f92fd32b4 upstream. The code that fills packed command header assumes that CPU runs in little-endian mode. Hence the

[PATCH 4.4 55/68] can: fix oops caused by wrong rtnl dellink usage

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Oliver Hartkopp commit 25e1ed6e64f52a692ba3191c4fde650aab3ecc07 upstream. For 'real' hardware CAN devices the netlink interface is used to set CAN specific

[PATCH 4.4 11/68] mm, compaction: prevent VM_BUG_ON when terminating freeing scanner

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: David Rientjes commit a46cbf3bc53b6a93fb84a5ffb288c354fa807954 upstream. It's possible to isolate some freepages in a pageblock and then fail split_free_page() due to the

[PATCH 4.4 61/68] i2c: qup: Fix wrong value of index variable

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Sricharan R commit d4f56c7773483b8829e89cfc739b7a5a071f6da0 upstream. index gets incremented during check to determine if the messages can be transferred with dma.

[PATCH 4.4 62/68] i2c: mux: reg: wrong condition checked for of_address_to_resource return value

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Lukasz Gemborowski commit 22ebf00eb56fe77922de8138aa9af9996582c2b3 upstream. of_address_to_resource return 0 on successful call but devm_ioremap_resource is

[PATCH 4.4 32/68] pinctrl: single: Fix missing flush of posted write for a wakeirq

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Tony Lindgren commit 0ac3c0a4025f41748a083bdd4970cb3ede802b15 upstream. With many repeated suspend resume cycles, the pin specific wakeirq may not always work on omaps. This is because the

[PATCH 4.4 52/68] can: at91_can: RX queue could get stuck at high bus load

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Wolfgang Grandegger commit 43200a4480cbbe660309621817f54cbb93907108 upstream. At high bus load it could happen that "at91_poll()" enters with all RX message boxes filled up. If then at the end

[PATCH 4.4 33/68] pinctrl: imx: Do not treat a PIN without MUX register as an error

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Shiyan commit ba562d5e54fd3136bfea0457add3675850247774 upstream. Some PINs do not have a MUX register, it is not an error. It is necessary to allow the continuation of the PINs

[PATCH 4.4 48/68] mmc: block: fix packed command header endianness

2016-08-08 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Taras Kondratiuk commit f68381a70bb2b26c31b13fdaf67c778f92fd32b4 upstream. The code that fills packed command header assumes that CPU runs in little-endian mode. Hence the header is malformed

<    3   4   5   6   7   8   9   10   11   12   >