[PATCH 3.2 000/101] 3.2.89-rc1 review

[Ben Hutchings]

This is the start of the stable review cycle for the 3.2.89 release.
There are 101 patches in this series, which will be posted as responses
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat Jun 03 16:00:00 UTC 2017.
Anything received after that time might be too late.

A combined patch relative to 3.2.88 will be posted as an additional
response to this.  A shortlog and diffstat can be found below.

Ben.

-------------

Alex Deucher (1):
      drm/radeon: handle vfct with multiple vbios images
         [a882f5de402ded769af74fbf276132f9c175049c]

Amey Telawane (1):
      tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()
         [e09e28671cda63e6308b31798b997639120e2a21]

Andrey Konovalov (3):
      net/packet: fix overflow in check for priv area size
         [2b6867c2ce76c596676bec7d2d525af525fdc6e2]
      net/packet: fix overflow in check for tp_frame_nr
         [8f8d28e4d6d815a391285e121c3a53a0b6cb9e7b]
      net/packet: fix overflow in check for tp_reserve
         [bcc5364bdcfe131e6379363f089e7b4108d35b70]

Andrey Ryabinin (1):
      net/dccp: fix use after free in tw_timer_handler()
         [ec7cb62d18d854ea09df8b7194e7e710985f8b9a]

Andy Whitcroft (2):
      xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL  replay_window
         [677e806da4d916052585301785d847c3b3e6186a]
      xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder
         [f843ee6dd019bcece3e74e76ad9df0155655d0df]

Arnd Bergmann (3):
      MIPS: 'make -s' should be silent
         [8c9b23ffb3f92ffa4cbe37b1bab4542586e0bfd1]
      MIPS: ip27: Disable qlge driver in defconfig
         [b617649468390713db1515ea79fc772d2eb897a8]
      staging: rtl: fix possible NULL pointer dereference
         [6e017006022abfea5d2466cad936065f45763ad1]

Brian Norris (1):
      mwifiex: debugfs: Fix (sometimes) off-by-1 SSID print
         [6183468a23fc6b6903f8597982017ad2c7fdefcf]

Chris Salls (1):
      mm/mempolicy.c: fix error handling in set_mempolicy and mbind.
         [cf01fb9985e8deb25ccf0ea54d916b8871ae0e62]

Christoph Hellwig (3):
      nfsd: minor nfsd_setattr cleanup
         [758e99fefe1d9230111296956335cd35995c0eaf]
      nfsd: special case truncates some more
         [783112f7401ff449d979530209b3f6c2594fdb4e]
      nfsd: update mtime on truncate
         [f0c63124a6165792f6e37e4b5983792d009e1ce8]

Colyli@xxxxxxx (1):
      md linear: fix a race between linear_add() and linear_congested()
         [03a9e24ef2aaa5f1f9837356aed79c860521407a]

Craig Gallek (1):
      ipv6: Prevent overrun when parsing v6 header options
         [2423496af35d94a87156b063ea5cedffc10a70a1]

Dan Carpenter (3):
      KEYS: Fix an error code in request_master_key()
         [57cb17e764ba0aaa169d07796acce54ccfbc6cae]
      adm80211: return an error if adm8211_alloc_rings() fails
         [c705a6b3aa7804d7bc6660183f51e510c61dc807]
      ipx: call ipxitf_put() in ioctl error path
         [ee0d8d8482345ff97a75a7d747efc309f13b0d80]

David Howells (2):
      KEYS: Disallow keyrings beginning with '.' to be joined as session  keyrings
         [ee8f844e3c5a73b999edf733df1c529d6503ec2f]
      KEYS: Reinstate EPERM for a key type name beginning with a '.'
         [54e2c2c1a9d6cbb270b0999a38545fa9a69bee43]

David S. Miller (1):
      ipv6: Check ip6_find_1stfragopt() return value properly.
         [7dd7eb9513bd02184d45f000ab69d78cb1fa1531]

Dmitry Tunin (1):
      Bluetooth: Add another AR3012 04ca:3018 device
         [441ad62d6c3f131f1dbd7dcdd9cbe3f74dbd8501]

Eric Biggers (1):
      KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings
         [c9f838d104fed6f2f61d68164712e3204bf5271b]

Eric Dumazet (5):
      dccp/tcp: do not inherit mc_list from parent
         [657831ffc38e30092a2d5f03d385d710eb88b09a]
      ipv6: fix out of bound writes in __ip6_append_data()
         [232cd35d0804cc241eb887bb8d4d9b3b9881c64a]
      packet: handle too big packets for PACKET_V3
         [dc808110bb62b64a448696ecac3938902c92e1ab]
      ping: implement proper locking
         [43a6684519ab0a6c52024b5e25322476cabad893]
      sctp: do not inherit ipv6_{mc|ac|fl}_list from parent
         [fdcee2cbb8438702ea1b328fb6e0ac5e9a40c7f8]

Felipe Balbi (1):
      usb: dwc3: gadget: skip Set/Clear Halt when invalid
         [ffb80fc672c3a7b6afd0cefcb1524fb99917b2f3]

Felix Fietkau (1):
      ath5k: drop bogus warning on drv_set_key with unsupported cipher
         [a70e1d6fd6b5e1a81fa6171600942bee34f5128f]

Feras Daoud (2):
      IB/ipoib: Change list_del to list_del_init in the tx object
         [27d41d29c7f093f6f77843624fbb080c1b4a8b9c]
      IB/ipoib: Set device connection mode only when needed
         [80b5b35aba62232521b31440f0a3cf6caa033849]

Herbert Xu (1):
      crypto: ahash - Fix EINPROGRESS notification callback
         [ef0579b64e93188710d48667cb5e014926af9f1b]

Ian Abbott (1):
      serial: 8250_pci: Add MKS Tenta SCOM-0800 and SCOM-0801 cards
         [1c9c858e2ff8ae8024a3d75d2ed080063af43754]

J. Bruce Fields (3):
      nfsd4: minor NFSv2/v3 write decoding cleanup
         [db44bac41bbfc0c0d9dd943092d8bded3c9db19b]
      nfsd: check for oversized NFSv2/v3 arguments
         [e6838a29ecb484c97e4efef9429643b9851fba6e]
      nfsd: stricter decoding of write-like NFSv2/v3 ops
         [13bf9fbff0e5e099e2b6f003a0ab8ae145436309]

James Cowgill (1):
      MIPS: OCTEON: Fix copy_from_user fault handling for large buffers
         [884b426917e4b3c85f33b382c792a94305dfdd62]

Jan Kara (2):
      ext4: fix data corruption in data=journal mode
         [3b136499e906460919f0d21a49db1aaccf0ae963]
      ext4: trim allocation requests to group size
         [cd648b8a8fd5071d232242d5ee7ee3c0815776af]

Jason Gunthorpe (1):
      RDMA/core: Fix incorrect structure packing for booleans
         [55efcfcd7776165b294f8b5cd6e05ca00ec89b7c]

Javier Martinez Canillas (1):
      tty: serial: msm: Fix module autoload
         [abe81f3b8ed2996e1712d26d38ff6b73f582c616]

Johan Hovold (20):
      USB: iowarrior: fix NULL-deref at probe
         [b7321e81fc369abe353cf094d4f0dc2fe11ab95f]
      USB: serial: ark3116: fix open error handling
         [b631433b175f1002a31020e09bbfc2e5caecf290]
      USB: serial: ark3116: fix register-accessor error handling
         [9fef37d7cf170522fb354d6d0ea6de09b9b16678]
      USB: serial: ch341: fix modem-status handling
         [a0467a967f347842b30739aae636c44980265265]
      USB: serial: digi_acceleport: fix OOB data sanity check
         [2d380889215fe20b8523345649dee0579821800c]
      USB: serial: digi_acceleport: fix OOB-event processing
         [2f6821462fe3ace62df3f1b5a9463153e8288298]
      USB: serial: digi_acceleport: fix incomplete rx sanity check
         [1b0aed2b1600f6e5c7b9acfbd610a4e351ef5232]
      USB: serial: ftdi_sio: fix extreme low-latency setting
         [c6dce2626606ef16434802989466636bc28c1419]
      USB: serial: ftdi_sio: fix latency-timer error handling
         [e3e574ad85a208cb179f33720bb5f12b453de33c]
      USB: serial: ftdi_sio: fix line-status over-reporting
         [a6bb1e17a39818b01b55d8e6238b4b5f06d55038]
      USB: serial: ftdi_sio: fix modem-status error handling
         [427c3a95e3e29e65f59d99aaf320d7506f3eed57]
      USB: serial: io_edgeport: fix descriptor error handling
         [3c0e25d883d06a1fbd1ad35257e8abaa57befb37]
      USB: serial: io_edgeport: fix epic-descriptor handling
         [e4457d9798adb96272468e93da663de9bd0a4198]
      USB: serial: io_ti: fix information leak in completion handler
         [654b404f2a222f918af9b0cd18ad469d0c941a8e]
      USB: serial: keyspan_pda: fix receive sanity checks
         [c528fcb116e61afc379a2e0a0f70906b937f1e2c]
      USB: serial: mct_u232: fix modem-status error handling
         [36356a669eddb32917fc4b5c2b9b8bf80ede69de]
      USB: serial: mos7840: fix another NULL-deref at open
         [5182c2cf2a9bfb7f066ef0bdd2bb6330b94dd74e]
      USB: serial: omninet: fix reference leaks at open
         [30572418b445d85fcfe6c8fe84c947d2606767d8]
      USB: serial: ssu100: fix control-message error handling
         [1eac5c244f705182d1552a53e2f74e2775ed95d6]
      USB: serial: ti_usb_3410_5052: fix control-message error handling
         [39712e8bfa8d3aa6ce1e60fc9d62c9b076c17a30]

Julian Wiedmann (1):
      s390/qdio: clear DSCI prior to scanning multiple input queues
         [1e4a382fdc0ba8d1a85b758c0811de3a3631085e]

K. Y. Srinivasan (1):
      drivers: hv: Turn off write permission on the hypercall page
         [372b1e91343e657a7cc5e2e2bcecd5140ac28119]

Ken Lin (1):
      USB: serial: cp210x: add new IDs for GE Bx50v3 boards
         [9a593656def0dc2f6c227851e8e602077267a5f1]

Krzysztof Opasiak (1):
      usb: gadget: f_hid: Use spinlock instead of mutex
         [33e4c1a9987a1fc3b42c3b534100b5b006d55c61]

Li Qiang (1):
      drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()
         [e7e11f99564222d82f0ce84bd521e57d78a6b678]

Marek Vasut (4):
      crypto: ahash - Fully restore ahash request before completing
         [1d9a394b97b833d3ab37f49caf12d0be3c88050b]
      crypto: hash - Fix the pointer voodoo in unaligned ahash
         [ab6bf4e5e5e4298e8649e635bee25542cccbfd97]
      crypto: hash - Pull out the functions to save/restore request
         [1ffc9fbd1e5071948b6d48f9a27d845738ee890f]
      crypto: hash - Simplify the ahash_finup implementation
         [d4a7a0fbe959e12bdd071b79b50ed34853a6db8f]

Michael Petlan (1):
      perf script: Fix man page about --dump-raw-trace option
         [5c64f99b1d030ce52acce53d83141d88f79e6362]

Michel DÃnzer (1):
      drm/ttm: Make sure BOs being swapped out are cacheable
         [239ac65fa5ffab71adf66e642750f940e7241d99]

Miklos Szeredi (1):
      fuse: add missing FR_FORCE
         [2e38bea99a80eab408adee27f873a188d57b76cb]

Mimi Zohar (1):
      KEYS: special dot prefixed keyring name bug fix
         [a4e3b8d79a5c6d40f4a9703abf7fe3abcc6c3b8d]

Murray McAllister (1):
      drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
         [36274ab8c596f1240c606bb514da329add2a1bcd]

NeilBrown (1):
      md: ensure md devices are freed before module is unloaded.
         [9356863c9409efc79029c01a85d015efae977e69]

Nikola Pajkovsky (1):
      x86/pci-calgary: Fix iommu_free() comparison of unsigned expression >= 0
         [68dee8e2f2cacc54d038394e70d22411dee89da2]

RafaÅ MiÅecki (1):
      bcma: use (get|put)_device when probing/removing device driver
         [a971df0b9d04674e325346c17de9a895425ca5e1]

Raghava Aditya Renukunta (2):
      scsi: aacraid: Fix memory leak in fib init path
         [1bff5abca65d4b9761fcc992ab6288243220003d]
      scsi: aacraid: Reorder Adapter status check
         [c421530bf848604e97d0785a03b3fe2c62775083]

Ralf Baechle (1):
      MIPS: Fix special case in 64 bit IP checksumming.
         [66fd848cadaa6be974a8c780fbeb328f0af4d3bd]

Randy Dunlap (1):
      [media] media: fix dm1105.c build error
         [e3bb3cddd177550d63a3e4909cf1a7782f13414d]

Ravi Bangoria (1):
      powerpc/xmon: Fix data-breakpoint
         [c21a493a2b44650707d06741601894329486f2ad]

Ravikumar Kattekola (1):
      mmc: host: omap_hsmmc: avoid possible overflow of timeout value
         [a53210f56d7f3f75d1edc1b3a069ddb87b72a919]

Roman Mashak (1):
      net sched actions: decrement module reference count after table flush.
         [edb9d1bff4bbe19b8ae0e71b1f38732591a9eeb2]

Steve Wise (1):
      rdma_cm: fail iwarp accepts w/o connection params
         [f2625f7db4dd0bbd16a9c7d2950e7621f9aa57ad]

Takashi Iwai (3):
      ALSA: ctxfi: Fallback DMA mask to 32bit
         [15c75b09f8d190f89ab4db463b87d411ca349dfe]
      ALSA: seq: Fix link corruption by event error handling
         [f3ac9f737603da80c2da3e84b89e74429836bb6d]
      ALSA: timer: Reject user params with too small ticks
         [71321eb3f2d0df4e6c327e0b936eec4458a12054]

Theodore Ts'o (3):
      ext4: preserve the needs_recovery flag when the journal is aborted
         [97abd7d4b5d9c48ec15c425485f054e1c15e591b]
      ext4: use private version of page_zero_new_buffers() for data=journal mode
         [b90197b655185a11640cce3a0a0bc5d8291b8ad2]
      jbd2: don't leak modified metadata buffers on an aborted journal
         [e112666b4959b25a8552d63bc564e1059be703e8]

Trond Myklebust (3):
      NFSv4: Fix range checking in __nfs4_get_acl_uncached and __nfs4_proc_set_acl
         [21f498c2f73bd6150d82931f09965826dca0b5f2]
      NFSv4: Fix the underestimation of delegation XDR space reservation
         [5a1f6d9e9b803003271b40b67786ff46fa4eda01]
      nlm: Ensure callback code also checks that the files match
         [251af29c320d86071664f02c76f0d063a19fefdf]

WANG Cong (1):
      ipv6/dccp: do not inherit ipv6_mc_list from parent
         [83eaddab4378db256d00d295bda6ca997cd13a52]

Weston Andros Adamson (1):
      NFSv4: fix getacl ERANGE for some ACL buffer sizes
         [ed92d8c137b7794c2c2aa14479298b9885967607]

 Makefile                                      |   4 +-
 arch/mips/Makefile                            |   4 +-
 arch/mips/cavium-octeon/octeon-memcpy.S       |  20 ++-
 arch/mips/configs/ip27_defconfig              |   1 -
 arch/mips/include/asm/checksum.h              |   2 +
 arch/powerpc/kernel/hw_breakpoint.c           |   4 +-
 arch/x86/kernel/pci-calgary_64.c              |   2 +-
 crypto/ahash.c                                | 203 +++++++++++++++++---------
 drivers/bcma/main.c                           |   4 +
 drivers/bluetooth/ath3k.c                     |   2 +
 drivers/bluetooth/btusb.c                     |   1 +
 drivers/gpu/drm/radeon/radeon_bios.c          |  68 +++++----
 drivers/gpu/drm/ttm/ttm_bo.c                  |   4 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_resource.c      |   9 +-
 drivers/hv/hv.c                               |   2 +-
 drivers/infiniband/core/cma.c                 |   3 +
 drivers/infiniband/ulp/ipoib/ipoib_cm.c       |  10 +-
 drivers/md/linear.c                           |  29 +++-
 drivers/md/linear.h                           |   1 +
 drivers/md/md.c                               |   7 +
 drivers/media/dvb/dm1105/Kconfig              |   2 +-
 drivers/mmc/host/omap_hsmmc.c                 |   7 +-
 drivers/net/wireless/adm8211.c                |   3 +-
 drivers/net/wireless/ath/ath5k/mac80211-ops.c |   3 +-
 drivers/net/wireless/mwifiex/debugfs.c        |   3 +-
 drivers/s390/cio/qdio_thinint.c               |   8 +-
 drivers/scsi/aacraid/commsup.c                |  36 +++--
 drivers/scsi/aacraid/src.c                    |  21 ++-
 drivers/staging/rtl8712/rtl871x_recv.c        |   7 +-
 drivers/tty/serial/8250_pci.c                 |  13 ++
 drivers/tty/serial/msm_serial.c               |   1 +
 drivers/usb/dwc3/gadget.c                     |   6 +
 drivers/usb/gadget/f_hid.c                    |  51 ++++---
 drivers/usb/misc/iowarrior.c                  |  13 +-
 drivers/usb/serial/ark3116.c                  |  38 +++--
 drivers/usb/serial/ch341.c                    |  26 ++--
 drivers/usb/serial/cp210x.c                   |   2 +
 drivers/usb/serial/digi_acceleport.c          |  52 ++++---
 drivers/usb/serial/ftdi_sio.c                 |  39 +++--
 drivers/usb/serial/io_edgeport.c              |  48 ++++--
 drivers/usb/serial/io_ti.c                    |   2 +-
 drivers/usb/serial/keyspan_pda.c              |  19 ++-
 drivers/usb/serial/mct_u232.c                 |   6 +-
 drivers/usb/serial/mos7840.c                  |   4 +-
 drivers/usb/serial/omninet.c                  |   4 -
 drivers/usb/serial/ssu100.c                   |  31 +++-
 drivers/usb/serial/ti_usb_3410_5052.c         |  12 +-
 fs/ext4/inode.c                               |  55 +++++--
 fs/ext4/mballoc.c                             |   7 +
 fs/ext4/super.c                               |   6 +-
 fs/fuse/file.c                                |   1 +
 fs/jbd2/transaction.c                         |   4 +-
 fs/nfs/nfs4proc.c                             |  26 ++--
 fs/nfs/nfs4xdr.c                              |   2 +
 fs/nfsd/nfs3xdr.c                             |  12 +-
 fs/nfsd/nfssvc.c                              |  36 +++++
 fs/nfsd/nfsxdr.c                              |  10 +-
 fs/nfsd/vfs.c                                 |  67 ++++++---
 include/crypto/internal/hash.h                |  10 ++
 include/linux/lockd/lockd.h                   |   3 +-
 include/rdma/ib_sa.h                          |   6 +-
 kernel/trace/trace.c                          |   2 +-
 mm/mempolicy.c                                |  20 +--
 net/dccp/ipv4.c                               |   6 +
 net/dccp/ipv6.c                               |  12 ++
 net/ipv4/inet_connection_sock.c               |   2 +
 net/ipv4/ping.c                               |   5 +-
 net/ipv6/af_inet6.c                           |   7 +-
 net/ipv6/ip6_output.c                         |  34 +++--
 net/ipv6/tcp_ipv6.c                           |   2 +
 net/ipv6/udp.c                                |   6 +-
 net/ipx/af_ipx.c                              |   5 +-
 net/packet/af_packet.c                        |  22 +++
 net/sched/act_api.c                           |   5 +-
 net/sctp/ipv6.c                               |   3 +
 net/xfrm/xfrm_user.c                          |   9 +-
 security/keys/encrypted-keys/encrypted.c      |   2 +-
 security/keys/keyctl.c                        |  20 +--
 security/keys/process_keys.c                  |  44 +++---
 sound/core/seq/seq_fifo.c                     |   3 +
 sound/core/timer.c                            |  18 ++-
 sound/pci/ctxfi/cthw20k1.c                    |  19 +--
 sound/pci/ctxfi/cthw20k2.c                    |  18 +--
 tools/perf/Documentation/perf-script.txt      |   4 +-
 84 files changed, 913 insertions(+), 437 deletions(-)

-- 
Ben Hutchings
The most exhausting thing in life is being insincere. - Anne Morrow Lindberg