[PATCH 3.2 00/95] 3.2.91-rc1 review

[Ben Hutchings]

This is the start of the stable review cycle for the 3.2.91 release.
There are 95 patches in this series, which will be posted as responses
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Tue Jul 18 13:56:34 UTC 2017.
Anything received after that time might be too late.

A combined patch relative to 3.2.90 will be posted as an additional
response to this.  A shortlog and diffstat can be found below.

Ben.

-------------

Adrian Hunter (1):
      mmc: sdhci: Do not disable interrupts while waiting for clock
         [e2ebfb2142acefecc2496e71360f50d25726040b]

Al Viro (1):
      p9_client_readdir() fix
         [71d6ad08379304128e4bdfaf0b4185d54375423e]

Alexey Kodanev (1):
      udp: avoid ufo handling on IP payload compression packets
         [4b3b45edba9222e518a1ec72df841eba3609fe34]

Andrey Ulanov (1):
      net: unix: properly re-increment inflight counter of GC discarded candidates
         [7df9c24625b9981779afb8fcdbe2bb4765e61147]

Anton Blanchard (1):
      scsi: lpfc: Add shutdown method for kexec
         [85e8a23936ab3442de0c42da97d53b29f004ece1]

Arnd Bergmann (4):
      ACPI / power: Avoid maybe-uninitialized warning
         [fe8c470ab87d90e4b5115902dd94eced7e3305c3]
      IB/qib: fix false-postive maybe-uninitialized warning
         [f6aafac184a3e46e919769dd4faa8bf0dc436534]
      hwmon: (asus_atk0110) fix uninitialized data access
         [a2125d02443e9a4e68bcfd9f8004fa23239e8329]
      virtio_balloon: prevent uninitialized variable use
         [f0bb2d50dfcc519f06f901aac88502be6ff1df2c]

Ben Hutchings (1):
      cpupower: Fix turbo frequency reporting for pre-Sandy Bridge cores
         [4cca0457686e4ee1677d69469e4ddfd94d389a80]

Bsegall@xxxxxxxxxx (1):
      ptrace: fix PTRACE_LISTEN race corrupting task->state
         [5402e97af667e35e54177af8f6575518bf251d51]

Dan Carpenter (1):
      net: tc35815: move free after the dereference
         [11faa7b0359aaf7efd406b7a6a077fda2b037d8e]

Dan Streetman (1):
      xen: do not re-use pirq number cached in pci device msi msg data
         [c74fd80f2f41d05f350bb478151021f88551afe8]

Dan Williams (1):
      USB: serial: option: add Quectel UC15, UC20, EC21, and EC25 modems
         [6e9f44eaaef0df7b846e9316fa9ca72a02025d44]

Daniel Borkmann (2):
      bpf: try harder on clones when writing into skb
         [3697649ff29e0f647565eed04b27a7779c646a22]
      perf symbols: Fix symbols__fixup_end heuristic for corner cases
         [e7ede72a6d40cb3a30c087142d79381ca8a31dab]

David Ahern (1):
      net: ipv6: set route type for anycast routes
         [4ee39733fbecf04cf9f346de2d64788c35028079]

David Howells (1):
      KEYS: Change the name of the dead type to ".dead" to prevent user access
         [c1644fe041ebaf6519f6809146a77c3ead9193af]

Dmitry Torokhov (1):
      Input: i8042 - add Clevo P650RS to the i8042 reset list
         [7c5bb4ac2b76d2a09256aec8a7d584bf3e2b0466]

Eric Dumazet (3):
      cx82310_eth: use skb_cow_head() to deal with cloned skbs
         [a9e840a2081ed28c2b7caa6a9a0041c950b3c37d]
      sch_dsmark: fix invalid skb_cow() usage
         [aea92fb2e09e29653b023d4254ac9fbf94221538]
      smsc75xx: use skb_cow_head() to deal with cloned skbs
         [b7c6d2675899cfff0180412c63fc9cbd5bacdb4d]

Felipe Balbi (1):
      usb: dwc3: gadget: make Set Endpoint Configuration macros safe
         [7369090a9fb57c3fc705ce355d2e4523a5a24716]

Gao Feng (1):
      netfilter: nf_nat_snmp: Fix panic when snmp_trap_helper fails to register
         [75c689dca98851d65ef5a27e5ce26b625b68751c]

Guillaume Nault (7):
      l2tp: don't mask errors in pppol2tp_getsockopt()
         [321a52a39189d5e4af542f7dcdc07bba4545cf5d]
      l2tp: don't mask errors in pppol2tp_setsockopt()
         [364700cf8fd54f54ad08313464105a414e3bccb7]
      l2tp: ensure session can't get removed during pppol2tp_session_ioctl()
         [57377d63547861919ee634b845c7caa38de4a452]
      l2tp: fix duplicate session creation
         [dbdbc73b44782e22b3b4b6e8b51e7a3d245f3086]
      l2tp: fix race in l2tp_recv_common()
         [61b9a047729bb230978178bca6729689d0c50ca2]
      l2tp: take a reference on sessions used in genetlink handlers
         [2777e2ab5a9cf2b4524486c6db1517a6ded25261]
      l2tp: take reference on sessions being dumped
         [e08293a4ccbcc993ded0fdc46f1e57926b833d63]

Hans de Goede (1):
      mmc: sdhci: Disable runtime pm when the sdio_irq is enabled
         [923713b357455cfb9aca2cd3429cb0806a724ed2]

James Hogan (1):
      MIPS: KGDB: Use kernel context for sleeping threads
         [162b270c664dca2e0944308e92f9fcc887151a72]

James Morse (1):
      ACPI / APEI: Add missing synchronize_rcu() on NOTIFY_SCI removal
         [7d64f82cceb21e6d95db312d284f5f195e120154]

Jan Beulich (1):
      xen-blkback: don't leak stack data via response ring
         [089bc0143f489bd3a4578bdff5f4ca68fb26f341]

Johan Hovold (17):
      Input: cm109 - validate number of endpoints before using them
         [ac2ee9ba953afe88f7a673e1c0c839227b1d7891]
      Input: hanwang - validate number of endpoints before using them
         [ba340d7b83703768ce566f53f857543359aa1b98]
      Input: iforce - validate number of endpoints before using them
         [59cf8bed44a79ec42303151dd014fdb6434254bb]
      Input: kbtab - validate number of endpoints before using them
         [cb1b494663e037253337623bf1ef2df727883cb7]
      Input: yealink - validate number of endpoints before using them
         [5cc4a1a9f5c179795c8a1f2b0f4361829d6a070e]
      USB: idmouse: fix NULL-deref at probe
         [b0addd3fa6bcd119be9428996d5d4522479ab240]
      USB: iowarrior: fix NULL-deref in write
         [de46e56653de7b3b54baa625bd582635008b8d05]
      USB: serial: io_ti: fix NULL-deref in interrupt callback
         [0b1d250afb8eb9d65afb568bac9b9f9253a82b49]
      USB: serial: safe_serial: fix information leak in completion handler
         [8c76d7cd520ebffc1ea9ea0850d87a224a50c7f2]
      USB: usbtmc: add missing endpoint sanity check
         [687e0687f71ec00e0132a21fef802dee88c2f1ad]
      USB: uss720: fix NULL-deref at probe
         [f259ca3eed6e4b79ac3d5c5c9fb259fb46e86217]
      USB: wusbcore: fix NULL-deref at probe
         [03ace948a4eb89d1cf51c06afdfc41ebca5fdb27]
      isdn/gigaset: fix NULL-deref at probe
         [68c32f9c2a36d410aa242e661506e5b2c2764179]
      mmc: ushc: fix NULL-deref at probe
         [181302dc7239add8ab1449c23ecab193f52ee6ab]
      net: wimax/i2400m: fix NULL-deref at probe
         [6e526fdff7be4f13b24f929a04c0e9ae6761291e]
      uwb: hwa-rc: fix NULL-deref at probe
         [daf229b15907fbfdb6ee183aac8ca428cb57e361]
      uwb: i1480-dfu: fix NULL-deref at probe
         [4ce362711d78a4999011add3115b8f4b0bc25e8c]

Johannes Berg (1):
      mac80211: reject ToDS broadcast data frames
         [3018e947d7fd536d57e2b550c33e456d921fff8c]

John Garry (1):
      scsi: libsas: fix ata xfer length
         [9702c67c6066f583b629cf037d2056245bb7a8e6]

Josh Poimboeuf (2):
      ACPI: Fix incompatibility with mcount-based function graph tracing
         [61b79e16c68d703dde58c25d3935d67210b7d71b]
      ftrace/x86: Fix triple fault with graph tracing and suspend-to-ram
         [34a477e5297cbaa6ecc6e17c042a866e1cbe80d6]

Juergen Gross (1):
      xen, fbfront: fix connecting to backend
         [9121b15b5628b38b4695282dc18c553440e0f79b]

Kai-Heng Feng (1):
      Input: i8042 - add noloop quirk for Dell Embedded Box PC 3000
         [45838660e34d90db8d4f7cbc8fd66e8aff79f4fe]

Kees Cook (2):
      fs/exec.c: account for argv/envp pointers
         [98da7d08850fb8bdeb395d6368ed15753304aa0c]
      mm: Tighten x86 /dev/mem with zeroing reads
         [a4866aa812518ed1a37d8ea0c881dc946409de94]

Ladi Prosek (1):
      virtio_balloon: init 1st buffer in stats vq
         [fc8653228c8588a120f6b5dad6983b7b61ff669e]

Marcelo Henrique Cerri (1):
      s390/decompressor: fix initrd corruption caused by bss clear
         [d82c0d12c92705ef468683c9b7a8298dd61ed191]

Martin K. Petersen (2):
      scsi: sd: Fix capacity calculation with 32-bit sector_t
         [7c856152cb92f8eee2df29ef325a1b1f43161aff]
      scsi: sr: Sanity check returned mode data
         [a00a7862513089f17209b732f230922f1942e0b9]

Mathias Nyman (1):
      xhci: Manually give back cancelled URB if we can't queue it for cancel
         [d3519b9d9606991a1305596348b6d690bfa3eb27]

Matt Fleming (1):
      sched/loadavg: Avoid loadavg spikes caused by delayed NO_HZ accounting
         [6e5f32f7a43f45ee55c401c0b9585eb01f9629a8]

Mauro Carvalho Chehab (1):
      [media] dvb-usb: don't use stack for firmware load
         [43fab9793c1f44e665b4f98035a14942edf03ddc]

Murray McAllister (1):
      drm/vmwgfx: avoid calling vzalloc with a 0 size in vmw_get_cap_3d_ioctl()
         [63774069d9527a1aeaa4aa20e929ef5e8e9ecc38]

Nathan Sullivan (1):
      net: phy: handle state correctly in phy_stop_machine
         [49d52e8108a21749dc2114b924c907db43358984]

Nicholas Bellinger (1):
      iscsi-target: Drop work-around for legacy GlobalSAN initiator
         [1c99de981f30b3e7868b8d20ce5479fa1c0fea46]

Oliver Neukum (1):
      ACM gadget: fix endianness in notifications
         [cdd7928df0d2efaa3270d711963773a08a4cc8ab]

Paul Mackerras (1):
      powerpc: Don't try to fix up misaligned load-with-reservation instructions
         [48fe9e9488743eec9b7c1addd3c93f12f2123d54]

Peter Zijlstra (3):
      futex: Add missing error handling to FUTEX_REQUEUE_PI
         [9bbb25afeb182502ca4f2c4f3f88af0681b34cae]
      futex: Fix potential use-after-free in FUTEX_REQUEUE_PI
         [c236c8e95a3d395b0494e7108f0d41cf36ec107c]
      perf/core: Fix event inheritance on fork()
         [e7cc4865f0f31698ef2f7aac01a50e78968985b7]

Raghava Aditya Renukunta (1):
      scsi: aacraid: Fix typo in blink status
         [934767c56b0d9dbb95a40e9e6e4d9dcdc3a165ad]

Rik van Riel (1):
      tracing: Add #undef to fix compile error
         [bf7165cfa23695c51998231c4efa080fe1d3548d]

Samuel Thibault (1):
      usb-core: Add LINEAR_FRAME_INTR_BINTERVAL USB quirk
         [3243367b209faed5c320a4e5f9a565ee2a2ba958]

Sebastian Siewior (1):
      ubi/upd: Always flush after prepared for an update
         [9cd9a21ce070be8a918ffd3381468315a7a76ba6]

Stefan BrÃns (1):
      [media] dvb-usb-firmware: don't do DMA on stack
         [67b0503db9c29b04eadfeede6bebbfe5ddad94ef]

Stefan Wahren (1):
      serial: mxs-auart: fix baud rate range
         [df57cf6a879502cd6e5559c1f2d6db12128e074f]

Steven Rostedt (1):
      ring-buffer: Have ring_buffer_iter_empty() return true when empty
         [78f7a45dac2a2d2002f98a3a95f7979867868d73]

T Makphaibulchoke (1):
      x86/mm/init.c: Fix devmem_is_allowed() off by one
         [73e8f3d7e2cb23614d5115703d76d8e54764b641]

Takashi Iwai (6):
      ALSA: ctxfi: Fix the incorrect check of dma_set_mask() call
         [f363a06642f28caaa78cb6446bbad90c73fe183c]
      ALSA: seq: Don't break snd_use_lock_sync() loop by timeout
         [4e7655fd4f47c23e5249ea260dc802f909a64611]
      ALSA: seq: Fix race during FIFO resize
         [2d7d54002e396c180db0c800c1046f0a3c471597]
      ALSA: seq: Fix racy cell insertions during snd_seq_pool_done()
         [c520ff3d03f0b5db7146d9beed6373ad5d2a5e0e]
      ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT
         [ba3021b2c79b2fa9114f92790a99deb27a65b728]
      ALSA: timer: Fix race between read and ioctl
         [d11662f4f798b50d8c8743f433842c3e40fe3378]

Thomas Gleixner (1):
      x86/vdso: Plug race between mapping and ELF header setup
         [6fdc6dd90272ce7e75d744f71535cfbd8d77da81]

Thomas Hellstrom (2):
      drm/vmwgfx: Remove getparam error message
         [53e16798b0864464c5444a204e1bb93ae246c429]
      drm/vmwgfx: Type-check lookups of fence objects
         [f7652afa8eadb416b23eb57dec6f158529942041]

Uwe Kleine-KÃnig (1):
      serial: mxs-auart: Fix baudrate calculation
         [a6040bc610554c66088fda3608ae5d6307c548e4]

Willy Tarreau (1):
      char: lp: fix possible integer overflow in lp_setup()
         [3e21f4af170bebf47c187c1ff8bf155583c9f3b1]

Yuejie Shi (1):
      af_key: Add lock to key dump
         [89e357d83c06b6fac581c3ca7f0ee3ae7e67109e]

 Makefile                                       |   4 +-
 arch/mips/kernel/kgdb.c                        |  48 +++++---
 arch/powerpc/kernel/align.c                    |  27 +++--
 arch/s390/boot/compressed/misc.c               |  35 +++---
 arch/x86/include/asm/elf.h                     |   2 +-
 arch/x86/kernel/ftrace.c                       |  12 ++
 arch/x86/mm/init.c                             |  41 +++++--
 arch/x86/pci/xen.c                             |  23 ++--
 drivers/acpi/Makefile                          |   1 -
 drivers/acpi/apei/ghes.c                       |   1 +
 drivers/acpi/power.c                           |   2 +-
 drivers/block/xen-blkback/blkback.c            |  23 ++--
 drivers/block/xen-blkback/common.h             |  19 +--
 drivers/char/lp.c                              |   6 +-
 drivers/char/mem.c                             |  82 ++++++++-----
 drivers/gpu/drm/vmwgfx/vmwgfx_fence.c          |  74 +++++++----
 drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c          |   4 +-
 drivers/hwmon/asus_atk0110.c                   |   3 +
 drivers/infiniband/hw/qib/qib_iba7322.c        |   2 +-
 drivers/input/joystick/iforce/iforce-usb.c     |   3 +
 drivers/input/misc/cm109.c                     |   4 +
 drivers/input/misc/yealink.c                   |   4 +
 drivers/input/serio/i8042-x86ia64io.h          |  14 +++
 drivers/input/tablet/hanwang.c                 |   3 +
 drivers/input/tablet/kbtab.c                   |   3 +
 drivers/isdn/gigaset/bas-gigaset.c             |   3 +
 drivers/media/dvb/dvb-usb/dvb-usb-firmware.c   |  33 +++--
 drivers/mmc/host/sdhci.c                       |  10 +-
 drivers/mmc/host/ushc.c                        |   3 +
 drivers/mtd/ubi/upd.c                          |   8 +-
 drivers/net/ethernet/toshiba/tc35815.c         |   2 +-
 drivers/net/phy/phy.c                          |   2 +-
 drivers/net/usb/cx82310_eth.c                  |   7 +-
 drivers/net/usb/smsc75xx.c                     |   8 +-
 drivers/net/wimax/i2400m/usb.c                 |   3 +
 drivers/scsi/aacraid/src.c                     |   2 +-
 drivers/scsi/libsas/sas_ata.c                  |   2 +-
 drivers/scsi/lpfc/lpfc_init.c                  |   1 +
 drivers/scsi/sd.c                              |  20 ++-
 drivers/scsi/sr.c                              |   6 +-
 drivers/target/iscsi/iscsi_target_parameters.c |  16 ---
 drivers/tty/serial/mxs-auart.c                 |  10 +-
 drivers/usb/class/usbtmc.c                     |   9 +-
 drivers/usb/core/config.c                      |  10 ++
 drivers/usb/core/quirks.c                      |   8 ++
 drivers/usb/dwc3/gadget.h                      |  14 +--
 drivers/usb/gadget/f_acm.c                     |   4 +-
 drivers/usb/host/xhci.c                        |  56 +++++----
 drivers/usb/misc/idmouse.c                     |   3 +
 drivers/usb/misc/iowarrior.c                   |   8 ++
 drivers/usb/misc/uss720.c                      |   5 +
 drivers/usb/serial/io_ti.c                     |   6 +
 drivers/usb/serial/option.c                    |  17 ++-
 drivers/usb/serial/safe_serial.c               |   5 +
 drivers/usb/wusbcore/wa-hc.c                   |   3 +
 drivers/uwb/hwa-rc.c                           |   3 +
 drivers/uwb/i1480/dfu/usb.c                    |   3 +
 drivers/video/xen-fbfront.c                    |   4 +-
 drivers/virtio/virtio_balloon.c                |   4 +
 fs/exec.c                                      |  28 ++++-
 include/linux/skbuff.h                         |   7 ++
 include/linux/usb/quirks.h                     |   6 +
 include/trace/events/syscalls.h                |   1 +
 kernel/events/core.c                           |   5 +-
 kernel/futex.c                                 |  22 ++--
 kernel/ptrace.c                                |  14 ++-
 kernel/sched.c                                 |   4 +-
 kernel/trace/ring_buffer.c                     |  16 ++-
 net/9p/client.c                                |   4 +
 net/ipv4/ip_output.c                           |   2 +-
 net/ipv4/netfilter/nf_nat_snmp_basic.c         |  19 +--
 net/ipv6/ip6_output.c                          |   2 +-
 net/ipv6/route.c                               |   2 +
 net/key/af_key.c                               |  42 +++++--
 net/l2tp/l2tp_core.c                           | 162 +++++++++++++++++++------
 net/l2tp/l2tp_core.h                           |   9 +-
 net/l2tp/l2tp_debugfs.c                        |  10 +-
 net/l2tp/l2tp_eth.c                            |  10 +-
 net/l2tp/l2tp_ip.c                             |  17 ++-
 net/l2tp/l2tp_netlink.c                        |  46 ++++---
 net/l2tp/l2tp_ppp.c                            |  94 +++++++-------
 net/mac80211/rx.c                              |  24 ++++
 net/sched/act_csum.c                           |   8 +-
 net/sched/act_nat.c                            |  18 +--
 net/sched/sch_dsmark.c                         |  10 +-
 net/unix/garbage.c                             |  18 +--
 security/keys/gc.c                             |   2 +-
 sound/core/seq/seq_clientmgr.c                 |   1 +
 sound/core/seq/seq_fifo.c                      |   7 ++
 sound/core/seq/seq_lock.c                      |   9 +-
 sound/core/seq/seq_memory.c                    |  17 ++-
 sound/core/seq/seq_memory.h                    |   1 +
 sound/core/timer.c                             |   7 +-
 sound/pci/ctxfi/cthw20k1.c                     |   2 +-
 tools/perf/util/symbol.c                       |   2 +-
 tools/power/cpupower/utils/helpers/cpuid.c     |   1 +
 96 files changed, 934 insertions(+), 453 deletions(-)

-- 
Ben Hutchings
If the facts do not conform to your theory, they must be disposed of.