I'm announcing the release of the 3.16.62 kernel.

All users of the 3.16 kernel series should upgrade.

The updated 3.16.y git tree can be found at: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.16.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git

The diff from 3.16.61 is attached to this message.

Ben.

------------

Makefile | 2 +- arch/arc/kernel/process.c | 20 + arch/arm/boot/dts/tegra30-cardhu.dtsi | 1 + arch/arm/kvm/mmu.c | 42 ++- arch/arm/mach-hisi/hotplug.c | 19 +- arch/arm/mm/ioremap.c | 2 +- arch/arm64/kvm/guest.c | 45 +++ arch/arm64/mm/init.c | 6 +- arch/mips/include/asm/processor.h | 15 +- arch/mips/kernel/ptrace.c | 2 +- arch/mips/kernel/ptrace32.c | 2 +- arch/mips/lib/memset.S | 4 +- arch/powerpc/include/asm/fadump.h | 3 - arch/powerpc/kernel/fadump.c | 92 ++++- arch/powerpc/kvm/book3s_64_mmu_hv.c | 2 +- arch/powerpc/mm/numa.c | 4 +- arch/powerpc/platforms/powernv/pci-ioda.c | 37 ++ arch/powerpc/platforms/pseries/ras.c | 4 +- arch/powerpc/sysdev/mpic_msgr.c | 2 +- arch/s390/include/asm/qdio.h | 1 - arch/s390/mm/fault.c | 2 + arch/s390/pci/pci.c | 2 + arch/x86/include/asm/kdebug.h | 12 +- arch/x86/include/asm/microcode_intel.h | 15 + arch/x86/include/asm/percpu.h | 8 +- arch/x86/include/asm/pgtable_64.h | 16 +- arch/x86/include/asm/processor.h | 4 +- arch/x86/kernel/Makefile | 1 + arch/x86/kernel/cpu/bugs.c | 46 ++- arch/x86/kernel/cpu/common.c | 1 + arch/x86/kernel/cpu/intel.c | 14 +- arch/x86/kernel/cpu/microcode/amd.c | 22 +- arch/x86/kernel/cpu/microcode/intel.c | 31 +- arch/x86/kernel/cpu/microcode/intel_early.c | 33 +- arch/x86/kernel/dumpstack_32.c | 2 +- arch/x86/kernel/dumpstack_64.c | 2 +- arch/x86/kernel/eisa.c | 24 ++ arch/x86/kernel/paravirt.c | 4 +- arch/x86/kernel/process_32.c | 4 +- arch/x86/kernel/process_64.c | 11 +- arch/x86/kernel/traps.c | 13 - arch/x86/mm/kmemcheck/error.c | 2 +- arch/x86/mm/pgtable.c | 6 +- arch/x86/vdso/vclock_gettime.c | 18 +- arch/xtensa/include/asm/cacheasm.h | 69 ++-- block/bio-integrity.c | 26 -- block/partitions/aix.c | 13 +- crypto/ablkcipher.c | 57 ++- crypto/blkcipher.c | 54 ++- crypto/cts.c | 3 +- crypto/sha1_generic.c | 2 +- crypto/sha256_generic.c | 5 +- crypto/sha512_generic.c | 2 +- crypto/tgr192.c | 4 +- crypto/vmac.c | 412 +++++++++------------ crypto/wp512.c | 8 +- drivers/acpi/bus.c | 13 +- drivers/base/power/main.c | 5 +- drivers/block/nbd.c | 3 + drivers/cdrom/cdrom.c | 2 +- drivers/char/ipmi/ipmi_bt_sm.c | 92 ++--- drivers/crypto/mxs-dcp.c | 53 +-- drivers/edac/edac_mc_sysfs.c | 6 +- drivers/edac/i7core_edac.c | 24 +- drivers/gpu/drm/drm_fb_helper.c | 91 ++--- drivers/gpu/drm/i915/i915_reg.h | 1 + drivers/gpu/drm/i915/intel_ddi.c | 4 + drivers/gpu/drm/i915/intel_display.c | 8 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 20 +- drivers/gpu/drm/panel/panel-s6e8aa0.c | 2 +- drivers/gpu/drm/udl/udl_fb.c | 10 +- drivers/gpu/drm/udl/udl_main.c | 35 +- drivers/hv/connection.c | 8 +- drivers/hwmon/nct6775.c | 28 +- drivers/i2c/busses/i2c-xiic.c | 4 + drivers/iio/frequency/ad9523.c | 4 +- drivers/infiniband/core/cma.c | 12 +- drivers/infiniband/core/ucm.c | 3 + drivers/infiniband/core/ucma.c | 9 + drivers/infiniband/hw/cxgb4/ev.c | 1 + drivers/infiniband/hw/cxgb4/qp.c | 62 +++- drivers/infiniband/hw/cxgb4/t4.h | 11 + drivers/infiniband/ulp/ipoib/ipoib_cm.c | 2 + drivers/infiniband/ulp/ipoib/ipoib_multicast.c | 1 + drivers/infiniband/ulp/srpt/ib_srpt.c | 6 +- drivers/infiniband/ulp/srpt/ib_srpt.h | 4 +- drivers/input/mouse/elantech.c | 2 + drivers/leds/leds-max8997.c | 2 +- drivers/md/bcache/bcache.h | 1 + drivers/md/bcache/closure.h | 3 - drivers/md/bcache/io.c | 1 + drivers/md/bcache/journal.c | 8 +- drivers/md/bcache/request.c | 14 +- drivers/md/bcache/super.c | 29 +- drivers/md/dm-cache-metadata.c | 3 +- drivers/md/dm-cache-target.c | 5 +- drivers/md/dm-crypt.c | 8 +- drivers/media/platform/exynos4-is/fimc-isp-video.c | 11 +- drivers/media/platform/omap3isp/isp.c | 2 +- drivers/media/usb/dvb-usb-v2/gl861.c | 17 +- drivers/media/usb/dvb-usb-v2/rtl28xxu.c | 2 +- drivers/mfd/sm501.c | 1 + drivers/misc/hmc6352.c | 2 + drivers/misc/mei/nfc.c | 2 +- drivers/misc/vmw_vmci/vmci_queue_pair.c | 4 +- drivers/mtd/mtdchar.c | 10 +- drivers/mtd/nand/mxc_nand.c | 4 +- drivers/mtd/spi-nor/fsl-quadspi.c | 20 +- drivers/net/ethernet/cadence/macb.c | 10 +- drivers/net/ethernet/marvell/mvneta.c | 1 - drivers/net/ethernet/qlogic/qlcnic/qlcnic.h | 8 +- .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c | 3 +- .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.h | 3 +- drivers/net/ethernet/qlogic/qlcnic/qlcnic_hw.h | 3 +- drivers/net/ethernet/qlogic/qlcnic/qlcnic_io.c | 12 +- drivers/net/ethernet/realtek/r8169.c | 8 +- drivers/net/ppp/pppoe.c | 3 + drivers/net/team/team.c | 5 + drivers/net/usb/asix_common.c | 3 + drivers/net/usb/ax88179_178a.c | 3 + drivers/net/usb/r8152.c | 3 + drivers/net/usb/smsc75xx.c | 3 + drivers/net/usb/smsc95xx.c | 3 + drivers/net/usb/sr9800.c | 3 + drivers/net/vxlan.c | 103 ++++-- drivers/net/wireless/ath/ath10k/mac.c | 7 + drivers/net/wireless/ath/wil6210/wmi.c | 7 +- drivers/net/wireless/b43/leds.c | 2 +- drivers/net/wireless/b43legacy/leds.c | 2 +- drivers/net/wireless/libertas/dev.h | 1 + drivers/net/wireless/libertas/if_sdio.c | 34 +- drivers/net/wireless/rndis_wlan.c | 2 + drivers/net/xen-netfront.c | 6 +- drivers/of/selftest.c | 28 +- drivers/pci/host/pci-mvebu.c | 2 +- drivers/pci/hotplug/pci_hotplug_core.c | 9 + drivers/pci/hotplug/pciehp.h | 1 + drivers/pci/hotplug/pciehp_core.c | 5 + drivers/pci/hotplug/pciehp_hpc.c | 18 +- drivers/pci/pci.c | 27 +- drivers/pinctrl/berlin/berlin.c | 13 +- drivers/pinctrl/pinctrl-imx.c | 2 +- drivers/pinctrl/pinctrl-imx1-core.c | 2 +- drivers/pinctrl/pinctrl-msm.c | 10 +- drivers/platform/x86/alienware-wmi.c | 1 + drivers/platform/x86/ideapad-laptop.c | 7 + drivers/power/generic-adc-battery.c | 25 +- drivers/ptp/ptp_chardev.c | 4 + drivers/pwm/pwm-tiehrpwm.c | 13 +- drivers/regulator/core.c | 3 +- drivers/s390/cio/qdio_main.c | 5 +- drivers/scsi/aic94xx/aic94xx_init.c | 4 +- drivers/scsi/scsi_sysfs.c | 20 +- drivers/scsi/virtio_scsi.c | 6 +- drivers/spi/spi-rspi.c | 140 +++++-- drivers/spi/spi-sh-msiof.c | 57 ++- drivers/spi/spi-tegra20-slink.c | 31 +- drivers/staging/rts5208/sd.c | 2 +- drivers/staging/usbip/vhci_hcd.c | 43 ++- drivers/target/iscsi/iscsi_target_login.c | 35 +- drivers/target/iscsi/iscsi_target_tpg.c | 3 +- drivers/tty/serial/cpm_uart/cpm_uart_core.c | 10 +- drivers/tty/serial/pxa.c | 3 +- drivers/tty/serial/serial_core.c | 17 +- drivers/tty/tty_ioctl.c | 15 +- drivers/tty/vt/vt_ioctl.c | 4 + drivers/uio/uio.c | 3 +- drivers/usb/core/devio.c | 24 +- drivers/usb/core/driver.c | 50 +-- drivers/usb/core/hcd-pci.c | 2 - drivers/usb/core/message.c | 11 + drivers/usb/core/quirks.c | 7 + drivers/usb/core/usb.c | 2 + drivers/usb/gadget/f_mass_storage.c | 3 + drivers/usb/gadget/net2280.c | 36 +- drivers/usb/host/u132-hcd.c | 2 +- drivers/usb/host/xhci-pci.c | 2 + drivers/usb/misc/uss720.c | 4 +- drivers/usb/misc/yurex.c | 5 +- drivers/usb/serial/io_ti.h | 2 +- drivers/usb/serial/kobil_sct.c | 12 +- drivers/usb/serial/sierra.c | 4 +- drivers/usb/serial/ti_usb_3410_5052.c | 13 +- drivers/usb/serial/ti_usb_3410_5052.h | 2 - drivers/usb/serial/usb-serial-simple.c | 3 +- drivers/usb/storage/scsiglue.c | 9 + drivers/usb/storage/uas.c | 20 + drivers/usb/storage/unusual_devs.h | 7 + drivers/video/fbdev/aty/atyfb.h | 3 +- drivers/video/fbdev/aty/atyfb_base.c | 7 +- drivers/video/fbdev/aty/mach64_ct.c | 10 +- drivers/video/fbdev/core/fbmem.c | 38 +- drivers/video/fbdev/omap/omapfb_main.c | 2 +- drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c | 5 +- drivers/video/fbdev/udlfb.c | 140 ++++--- fs/9p/xattr.c | 6 +- fs/binfmt_elf.c | 2 +- fs/btrfs/disk-io.c | 10 +- fs/btrfs/inode.c | 25 -- fs/btrfs/super.c | 1 - fs/btrfs/volumes.c | 10 +- fs/cachefiles/namei.c | 2 +- fs/cifs/cifs_debug.c | 30 +- fs/cifs/cifsfs.c | 20 +- fs/cifs/connect.c | 9 +- fs/cifs/inode.c | 2 + fs/cifs/readdir.c | 11 +- fs/cifs/sess.c | 6 + fs/cifs/smb2ops.c | 23 +- fs/cifs/smb2pdu.c | 40 +- fs/cifs/smb2pdu.h | 11 + fs/ext4/dir.c | 20 +- fs/ext4/inline.c | 4 +- fs/ext4/mballoc.c | 4 +- fs/ext4/mmp.c | 1 - fs/ext4/namei.c | 6 + fs/ext4/resize.c | 45 ++- fs/ext4/xattr.c | 2 + fs/fuse/cuse.c | 2 +- fs/fuse/dev.c | 7 +- fs/fuse/file.c | 1 + fs/fuse/fuse_i.h | 2 - fs/fuse/inode.c | 37 +- fs/ocfs2/buffer_head_io.c | 1 + fs/ocfs2/dlm/dlmmaster.c | 4 +- fs/proc/base.c | 14 + fs/pstore/ram.c | 29 +- fs/pstore/ram_core.c | 17 +- fs/quota/quota.c | 5 +- fs/reiserfs/xattr.c | 6 +- fs/seq_file.c | 7 +- fs/sysfs/file.c | 44 +++ fs/ubifs/journal.c | 16 +- fs/ubifs/lprops.c | 8 +- fs/ubifs/super.c | 3 + fs/xattr.c | 2 +- fs/xfs/xfs_attr.c | 9 +- include/crypto/vmac.h | 63 ---- include/linux/blkdev.h | 38 ++ include/linux/cpuidle.h | 3 + include/linux/netdevice.h | 7 + include/linux/percpu_counter.h | 13 +- include/linux/posix-timers.h | 4 +- include/linux/seq_file.h | 13 +- include/linux/skbuff.h | 5 + include/linux/sysfs.h | 14 + include/linux/usb.h | 2 +- include/net/ip_fib.h | 1 + include/net/netfilter/nf_tables.h | 4 +- include/video/udlfb.h | 5 +- kernel/auditsc.c | 8 +- kernel/events/core.c | 15 +- kernel/kprobes.c | 4 +- kernel/posix-cpu-timers.c | 2 +- kernel/posix-timers.c | 31 +- kernel/sched/idle.c | 2 +- kernel/time/alarmtimer.c | 3 +- kernel/trace/blktrace.c | 4 + kernel/trace/ring_buffer.c | 2 + kernel/trace/trace.c | 4 +- kernel/trace/trace_uprobe.c | 2 +- lib/percpu_counter.c | 6 +- mm/huge_memory.c | 6 +- mm/madvise.c | 2 +- mm/memory.c | 15 +- mm/mremap.c | 21 +- mm/shmem.c | 2 + mm/truncate.c | 8 +- mm/vmstat.c | 3 + net/9p/client.c | 2 +- net/9p/trans_fd.c | 7 +- net/9p/trans_rdma.c | 3 + net/9p/trans_virtio.c | 13 +- net/batman-adv/gateway_client.c | 11 +- net/batman-adv/main.c | 8 +- net/batman-adv/network-coding.c | 34 +- net/batman-adv/soft-interface.c | 27 +- net/batman-adv/translation-table.c | 6 +- net/core/dev.c | 28 +- net/core/rtnetlink.c | 6 + net/core/skbuff.c | 12 +- net/ieee802154/6lowpan_rtnl.c | 140 +++++-- net/ipv4/fib_frontend.c | 4 + net/ipv4/fib_semantics.c | 50 +++ net/ipv4/igmp.c | 8 +- net/ipv4/ip_tunnel.c | 9 + net/ipv6/addrconf.c | 6 +- net/ipv6/af_inet6.c | 4 +- net/ipv6/ip6_output.c | 3 +- net/ipv6/ip6_tunnel.c | 13 +- net/ipv6/raw.c | 34 +- net/ipv6/xfrm6_output.c | 2 + net/l2tp/l2tp_core.c | 2 +- net/mac80211/cfg.c | 2 +- net/mac802154/tx.c | 35 +- net/netfilter/nf_tables_api.c | 10 +- net/netfilter/nft_hash.c | 2 +- net/netfilter/nft_rbtree.c | 2 +- net/sched/act_ipt.c | 2 +- net/wireless/nl80211.c | 1 + net/wireless/reg.c | 1 + net/xfrm/xfrm_policy.c | 5 +- net/xfrm/xfrm_user.c | 12 + security/apparmor/policy_unpack.c | 32 -- security/keys/encrypted-keys/encrypted.c | 31 +- sound/aoa/core/gpio-feature.c | 4 +- sound/core/memalloc.c | 8 +- sound/core/seq/oss/seq_oss.c | 2 +- sound/core/seq/seq_clientmgr.c | 2 +- sound/core/seq/seq_virmidi.c | 10 + sound/drivers/vx/vx_pcm.c | 6 +- sound/firewire/bebob/bebob_maudio.c | 24 +- sound/pci/cs5535audio/cs5535audio.h | 6 +- sound/pci/cs5535audio/cs5535audio_pcm.c | 4 +- sound/pci/emu10k1/emufx.c | 2 +- sound/pci/vx222/vx222_ops.c | 20 +- sound/pcmcia/vx/vxp_ops.c | 22 +- sound/soc/codecs/wm8994.c | 1 + tools/hv/hv_fcopy_daemon.c | 1 + tools/hv/hv_kvp_daemon.c | 2 +- 320 files changed, 3009 insertions(+), 1647 deletions(-)

Aaron Knister (1): IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler

Aaron Ma (1): Input: elantech - enable middle button of touchpad on ThinkPad P72

Akihiro Tsukada (1): media: dvb-usb-v2/gl861: ensure USB message buffers DMA'able

Al Viro (1): cachefiles: fix the race between cachefiles_bury_object() and rmdir(2)

Alan Stern (6): USB: net2280: Fix erroneous synchronization change USB: leave LPM alone if possible when binding/unbinding interface drivers USB: remove LPM management from usb_driver_claim_interface() USB: fix error handling in usb_driver_claim_interface() USB: handle NULL config in usb_find_alt_setting() USB: fix the usbfs flag sanitization for control transfers

Alexander Aring (4): net: 6lowpan: fix reserved space for single frames mac802154: tx: cleanup crc calculation mac802154: tx: use put_unaligned_le16 for copy crc net: mac802154: tx: expand tailroom if necessary

Anand Jain (1): btrfs: rename total_bytes to avoid confusion

Andi Kleen (2): x86/spectre: Add missing family 6 check to microcode check x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+

Andrei Otcheretianski (1): cfg80211: reg: Init wiphy_idx in regulatory_hint_core()

Andrey Ryabinin (1): fuse: Don't access pipe->buffers without pipe_lock()

Andy Lutomirski (1): x86/vdso: Fix asm constraints on vDSO syscall fallbacks

Anssi Hannula (1): net: macb: do not disable MDIO bus at open/close time

Arunk Khandavalli (1): cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE

Ashish Samant (1): ocfs2: fix locking for res->tracking and dlm->tracking_list

Ashok Raj (1): x86/microcode/intel: Check microcode revision before updating sibling threads

Aurelien Aptel (1): smb2: fix missing files in root share directory listing

Bart Van Assche (4): IB/srpt: Support HCAs with more than two ports scsi: target/iscsi: Make iscsit_ta_authentication() respect the output buffer size scsi: sysfs: Introduce sysfs_{un,}break_active_protection() scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock

Ben Hutchings (2): USB: yurex: Fix buffer over-read in yurex_write() Linux 3.16.62

Benjamin Herrenschmidt (1): powerpc/powernv/pci: Work around races in PCI bridge enabling

Bhaktipriya Shridhar (1): bcache: Remove deprecated create_workqueue

Bin Yang (1): pstore: Fix incorrect persistent ram buffer mapping

Boris Ostrovsky (1): x86/EISA: Don't probe EISA bus for Xen PV guests

Borislav Petkov (1): x86/microcode/intel: Add a helper which gives the microcode revision

Catalin Marinas (1): cpuidle: Do not access cpuidle_devices when !CONFIG_CPU_IDLE

Chirantan Ekbote (1): 9p/net: Fix zero-copy path in the 9p virtio transport

Christian Brauner (1): getxattr: use correct xattr length

Christophe JAILLET (1): serial: pxa: Fix an error handling path in 'serial_pxa_probe()'

Christophe Leroy (1): serial: cpm_uart: return immediately from console poll

Claudio Imbrenda (1): s390/kvm: fix deadlock when killed by oom

Colin Ian King (2): leds: max8997: use mode when calling max8997_led_set_mode staging: rts5208: fix missing error check on call to rtsx_write_register

Corey Minyard (1): ipmi: Move BT capabilities detection to the detect call

Dan Carpenter (16): rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication() vmci: type promotion bug in qp_host_get_user_memory() drm/panel: type promotion bug in s6e8aa0_read_mtp_id() mei: bus: type promotion bug in mei_nfc_if_version() fbdev: omapfb: off by one in omapfb_register_client() pinctrl: imx: off by one in imx_pinconf_group_dbg_show() pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show() uio: potential double frees if __uio_register_device() fails scsi: aic94xx: fix an error code in aic94xx_init() powerpc: Fix size calculation using resource_size() hwmon: (nct6775) Set weight source to zero correctly cifs: prevent integer overflow in nxt_dir_entry() CIFS: fix wrapping bugs in num_entries() cifs: integer overflow in in SMB2_ioctl() x86/paravirt: Fix some warning messages net: sched: act_ipt: check for underflow in __tcf_ipt_init()

Daniel Black (1): mm: madvise(MADV_DODUMP): allow hugetlbfs pages

Daniel Borkmann (2): crypto: memzero_explicit - make sure to clear out sensitive data bpf, net: add skb_mac_header_len helper

Daniel Drake (1): PCI: Reprogram bridge prefetch registers on resume

Daniel Mack (2): libertas: fix suspend and resume for SDIO connected cards libertas: call into generic suspend code before turning off power

Darrick J. Wong (1): xfs: don't fail when converting shortform attr to long form during ATTR_REPLACE

Dave Chinner (1): percpu_counter: batch size aware __percpu_counter_compare()

Dave Martin (1): arm64: KVM: Tighten guest core register access from userspace

David Ahern (1): net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs

Denis Drozdov (1): IB/IPoIB: Set ah valid flag in multicast send flow

Dexuan Cui (1): Drivers: hv: vmbus: Use get/put_cpu() in vmbus_connect()

Douglas Anderson (1): pinctrl: msm: Fix msm_config_group_get() to be compliant

Emil Lundmark (1): drm: udl: Destroy framebuffer only if it was initialized

Eric Biggers (5): crypto: vmac - require a block cipher with 128-bit block size crypto: vmac - separate tfm and request context crypto: blkcipher - fix crash flushing dcache in error path crypto: ablkcipher - fix crash flushing dcache in error path KEYS: encrypted: fix buffer overread in valid_master_desc()

Eric Dumazet (3): ipv6: fix possible use-after-free in ip6_xmit() rtnl: limit IFLA_NUM_TX_QUEUES and IFLA_NUM_RX_QUEUES to 4096 net: make skb_partial_csum_set() more robust against overflows

Eric W. Biederman (1): ipv6: Compute net once in raw6_send_hdrinc

Ethan Lien (1): btrfs: use correct compare function of dirty_metadata_bytes

Eugeniy Paltsev (1): drm: fb-helper: Reject all pixel format changing requests

Evgenii Lepikhin (1): ISCSI: fix minor memory leak

Felipe Balbi (1): usb: gadget: udc: net2280: do not rely on 'driver' argument

Felix Fietkau (1): mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys

Filippo Sironi (1): x86/microcode: Update the new microcode revision unconditionally

Florian Fainelli (6): asix: Check for supported Wake-on-LAN modes ax88179_178a: Check for supported Wake-on-LAN modes sr9800: Check for supported Wake-on-LAN modes r8152: Check for supported Wake-on-LAN Modes smsc75xx: Check for Wake-on-LAN modes smsc95xx: Check for Wake-on-LAN modes

Florian Schmaus (1): bcache: do not assign in if condition in bcache_init()

Florian Westphal (1): netfilter: nf_tables: fix register ordering

Geert Uytterhoeven (5): spi: sh-msiof: Add more register documentation spi: rspi: Fix invalid SPI use during system suspend spi: rspi: Handle dmaengine_prep_slave_sg() failures gracefully spi: rspi: Fix leaking of unused DMA descriptors spi: rspi: Fix interrupted DMA transfers

Greg Edwards (2): block: move bio_integrity_{intervals,bytes} into blkdev.h scsi: virtio_scsi: fix pi_bytes{out,in} on 4 KiB block size devices

Greg Hackmann (1): arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid()

Guenter Roeck (3): mfd: sm501: Set coherent_dma_mask when creating subdevices hwmon: (nct6775) Fix access to fan pulse registers of: unittest: Disable interrupt node tests for old world MAC systems

Guillaume Nault (1): pppoe: fix reception of frames with no mac header

Guoju Fang (1): bcache: add separate workqueue for journal_write to avoid deadlock

Gustavo A. R. Silva (9): ASoC: wm8994: Mark expected switch fall-through ASoC: wm8994: Fix missing break in switch hwmon: (nct6775) Fix potential Spectre v1 misc: hmc6352: fix potential Spectre v1 tty: vt_ioctl: fix potential Spectre v1 IB/ucm: Fix Spectre v1 vulnerability RDMA/ucma: Fix Spectre v1 vulnerability usb: gadget: storage: Fix Spectre v1 vulnerability ptp: fix Spectre v1 vulnerability

H. Nikolaus Schaller (2): power: generic-adc-battery: fix out-of-bounds write when copying channel properties power: generic-adc-battery: check for duplicate properties copied from iio channels

Haishuang Yan (1): vxlan: fix a potential issue when create a new vxlan fdb entry.

Han Xu (1): mtd: fsl-quadspi: fix macro collision problems with READ/WRITE

Hangbin Liu (2): igmp: fix incorrect unsolicit report count when join group igmp: fix incorrect unsolicit report count after link down and up

Hari Bathini (1): powerpc/fadump: handle crash memory ranges array index overflow

Heiner Kallweit (1): r8169: fix NAPI handling under high load

Hiromitsu Yamasaki (1): spi: sh-msiof: Fix handling of write value for SISTR register

Huacai Chen (1): MIPS: Change definition of cpu_relax() for Loongson-3

Ido Schimmel (1): team: Forbid enslaving team device to itself

Imre Deak (1): drm/i915/bdw: Increase IPS disable timeout to 100ms

Jani Nikula (1): drm/i915: set DP Main Stream Attribute for color range on DDI platforms

Jann Horn (6): mtdchar: fix overflows in adjustment of `count` reiserfs: fix broken xattr handling (heap corruption, bad retval) RDMA/ucma: check fd type in ucma_migrate_id() x86/process: Don't mix user/kernel regs in 64bit __show_regs() proc: restrict kernel stack dumps to root mm/vmstat.c: skip NR_TLB_REMOTE_FLUSH* properly

Javier Martinez Canillas (1): media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial data

Jean Delvare (1): ACPI / bus: Only call dmi_check_system() on X86

Jens Axboe (2): nbd: don't allow invalid blocksize settings bcache: don't embed 'return' statements in closure macros

Jeremy Cline (2): ext4: fix spectre gadget in ext4_mb_regular_allocator() fs/quota: Fix spectre gadget in do_quotactl

Jia-Ju Bai (2): usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame() usb: misc: uss720: Fix two sleep-in-atomic-context bugs

Jiri Olsa (2): perf/core: Protect PMU device removal with a 'pmu_bus_running' check, to fix CONFIG_DEBUG_TEST_DRIVER_REMOVE=y kernel panic perf/ring_buffer: Prevent concurent ring buffer access

Joel Fernandes (Google) (1): mm: shmem.c: Correctly annotate new inodes for lockdep

Johan Hovold (8): EDAC: Fix memleak in module init error path EDAC, i7core: Fix memleaks and use-after-free on probe and remove USB: serial: kobil_sct: fix modem-status error handling tty: fix termios input-speed encoding tty: fix termios input-speed encoding when using BOTHER USB: serial: io_ti: fix array underflow in completion handler USB: serial: ti_usb_3410_5052: fix array underflow in completion handler USB: serial: simple: add Motorola Tetra MTP6550 id

John Johansen (1): apparmor: remove no-op permission check in policy_unpack

John Ogness (1): USB: serial: sierra: fix potential deadlock at close

Jon Hunter (1): ARM: tegra: Fix Tegra30 Cardhu PCA954x reset

Josef Bacik (1): Btrfs: fix btrfs_write_inode vs delayed iput deadlock

Julian Wiedmann (1): s390/qdio: reset old sbal_state flags

Junxiao Bi (1): ocfs2: fix ocfs2 read block panic

K. Y. Srinivasan (1): Tools: hv: Fix a bug in the key delete code

Kees Cook (1): pstore/ram: Fix failure-path memory leak in ramoops_init

Kirill Tkhai (1): fuse: Add missed unlock_page() to fuse_readpages_fill()

Ladislav Michl (2): video: udlfb: Remove noisy warnings video: udlfb: Fix unaligned access

Lars-Peter Clausen (2): iio: ad9523: Fix displayed phase iio: ad9523: Fix return value for ad952x_store()

Leonard Crestez (1): crypto: mxs-dcp - Fix wait logic on chan threads

Li Dongyang (1): ext4: don't mark mmp buffer head dirty

Liang Chen (1): bcache: explicitly destroy mutex while exiting

Linus Torvalds (2): Make file credentials available to the seqfile interfaces mremap: properly flush TLB before releasing the page

Lior David (1): wil6210: missing length check in wmi_set_ie

Lukas Wunner (3): PCI: hotplug: Don't leak pci_slot on registration failure PCI: pciehp: Fix use-after-free on unplug PCI: pciehp: Fix unprotected list iteration in IRQ handler

Lyude Paul (1): drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect()

Maciej W. Rozycki (3): binfmt_elf: Respect error return from `regset->active' MIPS: Correct the 64-bit DSP accumulator register size MIPS: memset: Fix CPU_DADDI_WORKAROUNDS `small_fixup' regression

Mahesh Salgaonkar (2): powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX. powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.

Marcel Ziswiler (1): spi: tegra20-slink: explicitly enable/disable clock

Mario Limonciello (1): platform/x86: alienware-wmi: Correct a memory leak

Martin Kaiser (1): mtd: rawnand: mxc: remove __init qualifier from mxcnd_probe_dt

Masami Hiramatsu (1): kprobes: Make list and blacklist root user read only

Mathias Nyman (3): usb: Don't die twice if PCI xhci host is not responding in resume usb: Avoid use-after-free by flushing endpoints early in usb_set_interface() xhci: Add missing CAS workaround for Intel Sunrise Point xHCI

Mathieu OTHACEHE (1): USB: serial: ti_usb_3410_5052: use functions rather than macros

Matthias Brugger (1): tty: fix typo in comment of tty_termios_encode_baud_rate

Mauricio Faria de Oliveira (2): partitions/aix: fix usage of uninitialized lv_info and lvname structures partitions/aix: append null character to print data from disk

Mauro Carvalho Chehab (1): media: rtl28xxu: be sure that it won't go past the array size

Max Filippov (2): xtensa: limit offsets in __loop_cache_{all,page} xtensa: increase ranges in ___invalidate_{i,d}cache_all

Maxence Duprès (1): USB: add quirk for WORLDE Controller KS49 or Prodipe MIDI 49C USB controller

Mian Yousaf Kaukab (1): usb: gadget: net2280: fix pullup handling

Michael Bringmann (1): powerpc/pseries: Fix unitialized timer reset on migration

Michael Buesch (2): b43/leds: Ensure NUL-termination of LED name string b43legacy/leds: Ensure NUL-termination of LED name string

Mika Båtsman (1): media: gl861: fix probe of dvb_usb_gl861

Mike Christie (1): iscsi target: fix session creation failure handling

Mike Snitzer (1): dm cache metadata: save in-core policy_hint_size to on-disk superblock

Miklos Szeredi (3): fuse: don't wake up reserved req in fuse_conn_kill() fuse: flush requests on umount fuse: Fix oops at process_init_reply()

Mikulas Patocka (13): fb: fix lost console when the user unplugs a USB adapter udlfb: fix semaphore value leak udlfb: fix display corruption of the last line udlfb: don't switch if we are switching to the same videomode udlfb: make a local copy of fb_ops udlfb: set optimal write delay udlfb: handle allocation failure udlfb: set line_length in dlfb_ops_set_par udl-kms: change down_interruptible to down udl-kms: handle allocation failure udl-kms: fix crash due to uninitialized memory dm: disable CRYPTO_TFM_REQ_MAY_SLEEP to fix a GFP_KERNEL recursion deadlock mach64: detect the dot clock divider correctly on sparc

Nadav Amit (1): x86/mm: Use WRITE_ONCE() when setting PTEs

Nicholas Mc Guire (3): ALSA: snd-aoa: add of_node_put() in error path ARM: hisi: handle of_iomap and fix missing of_node_put cifs: check kmalloc before use

Nicholas Piggin (1): mm: move tlb_table_flush to tlb_flush_mmu_free

Oliver Neukum (3): usb: uas: add support for more quirk flags USB: usbdevfs: sanitize flags more USB: usbdevfs: restore warning for nonsensical flags

Olle Liljenzin (1): platform/x86: ideapad-laptop: Add Y520-15IKBN to no_hw_rfkill

Ondrej Mosnáček (1): audit: Fix extended comparison of GID/EGID

Paolo Abeni (2): ip6_tunnel: be careful when accessing the inner header ip_tunnel: be careful when accessing the inner header

Parav Pandit (1): RDMA/cma: Protect cma dev list with lock

Paul Mackerras (1): KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function

Pavel Tikhomirov (1): mm: cleancache: fix corruption on missed inode invalidation

Peter Zijlstra (3): mm/tlb: Remove tlb_remove_table() non-concurrent condition perf/core: Fix perf_pmu_unregister() locking x86/percpu: Fix this_cpu_read()

Prarit Bhargava (1): x86/microcode: Make sure boot_cpu_data.microcode is up-to-date

Punit Agrawal (2): KVM: arm/arm64: Skip updating PMD entry if no change KVM: arm/arm64: Skip updating PTE entry if no change

Rafael J. Wysocki (1): PM / core: Clear the direct_complete flag on errors

Rian Hunter (1): x86/process: Re-export start_thread()

Richard Weinberger (4): ubifs: Fix synced_i_size calculation for xattr inodes ubifs: Fix memory leak in lprobs self-check ubifs: Check data node size before truncate ubifs: Check for name being NULL while mounting

Roopa Prabhu (2): vxlan: add new fdb alloc and create helpers vxlan: fix default fdb entry netlink notify ordering during netdev create

Sabrina Dubroca (2): ipv6: fix cleanup ordering for pingv6 registration net: ipv4: update fnhe_pmtu when first hop's MTU changes

Sagi Grimberg (1): iscsi-target: nullify session in failed login sequence

Sebastian Ott (1): s390/pci: fix out of bounds access during irq setup

Shahed Shaikh (1): qlcnic: fix Tx descriptor corruption on 82xx devices

Shenghui Wang (1): dm cache: destroy migration_cache if cache target registration failed

Shuah Khan (Samsung OSG) (1): usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()

Shubhrajyoti Datta (1): i2c: xiic: Make the start and the byte count write atomic

Simon Vincent (1): ieee802154: 6lowpan: ensure header compression does not corrupt ipv6 header

Steffen Klassert (1): xfrm: Validate address prefix lengths in the xfrm selector.

Steve French (4): smb3: fill in statfs fsid and correct namelen cifs: add missing debug entries for kconfig options SMB3: Backup intent flag missing for directory opens with backupuid mounts smb3: check for and properly advertise directory lease support

Steve Wise (3): RDMA/cxgb4: Only call CQ completion handler if it is armed iw_cxgb4: atomically flush the qp iw_cxgb4: only allow 1 flush on user qps

Steven Rostedt (VMware) (3): tracing: Do not call start/stop() functions when tracing_on does not change uprobes: Use synchronize_rcu() not synchronize_sched() tracing/blktrace: Fix to allow setting same value

Sven Eckelmann (8): ath10k: prevent active scans on potential unusable channels batman-adv: Prevent duplicated gateway_node entry batman-adv: Use kref_get for batadv_nc_get_nc_node batman-adv: Prevent duplicated nc_node entry batman-adv: Place kref_get for softif_vlan near use batman-adv: Prevent duplicated softif_vlan entry batman-adv: Prevent duplicated global TT entry batman-adv: Prevent duplicated tvlv handler

Sylwester Nawrocki (1): media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt()

Taehee Yoo (1): netfilter: nft_set: fix allocation size overflow in privsize callback.

Takashi Iwai (9): EDAC: i7core: Return proper error codes for kzalloc() errors platform/x86: ideapad-laptop: Apply no_hw_rfkill to Y20-15IKBM, too ALSA: memalloc: Don't exceed over the requested size ALSA: seq: Fix poll() error return ALSA: vx: Fix possible transfer overflow ALSA: vx222: Fix invalid endian conversions ALSA: vxpocket: Fix invalid endian conversions ALSA: cs5535audio: Fix invalid endian conversion ALSA: virmidi: Fix too long output trigger loop

Takashi Sakamoto (1): ALSA: bebob: use address returned by kmalloc() instead of kernel stack for streaming DMA mapping

Thadeu Lima de Souza Cascardo (1): xfrm6: call kfree_skb when skb is toobig

Theodore Ts'o (6): ext4: check for NUL characters in extended attribute's name ext4: check to make sure the rename(2)'s destination is not freed ext4: avoid divide by zero fault when deleting corrupted inline directories ext4: fix online resize's handling of a too-small final block group ext4: prevent online resize with backup superblock ext4: fix online resizing for bigalloc file systems with a 1k block size

Thomas Gleixner (3): alarmtimer: Prevent overflow for relative nanosleep x86/boot: Move EISA setup to a separate file posix-timers: Sanitize overrun handling

Thomas Petazzoni (2): PCI: mvebu: Fix I/O space end address calculation ARM: 8799/1: mm: fix pci_ioremap_io() offset check

Thomas Werschlein (1): cifs: connect to servername instead of IP for IPC$ share

Tim Anderson (1): USB: Add quirk to support DJI CineSSD

Tomas Bortoli (3): net/9p/client.c: version pointer uninitialized net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree() 9p: fix multiple NULL-pointer-dereferences

Tomi Valkeinen (1): fbdev/omapfb: fix omapfb_memory_read infoleak

Tycho Andersen (1): uart: fix race between uart_put_char() and uart_shutdown()

Vaibhav Nagarnaik (1): ring-buffer: Allow for rescheduling when removing pages

Varka Bhadram (1): mac802154: common tx error path

Vignesh R (2): pwm: tiehrpwm: Don't use emulation mode bits to control PWM output pwm: tiehrpwm: Fix disabling of output of PWMs

Vineet Gupta (1): ARC: clone syscall to setp r25 as thread pointer

Vitaly Kuznetsov (2): xen-netfront: fix queue name setting tools: hv: fcopy: set 'error' in case an unknown operation was requested

Wei Wang (2): l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache ipv6: take rcu lock in rawv6_send_hdrinc()

Willy Tarreau (1): ALSA: emu10k1: fix possible info leak to userspace on SNDRV_EMU10K1_IOCTL_INFO

Xiao Liang (1): xen-netfront: fix warn message as irq device name has '/'

Yelena Krivosheev (1): net: mvneta: fix mtu change on port without link

Young_X (1): cdrom: fix improper type cast, which can leat to information leak.

Yu Zhao (1): regulator: fix crash caused by null driver data

YueHaibing (2): xfrm: fix 'passing zero to ERR_PTR()' warning pinctrl: berlin: fix 'pctrl->functions' allocation in berlin_pinctrl_build_state

jiangyiwen (1): 9p/virtio: fix off-by-one error in sg list bounds check

piaojun (1): fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed