[PATCH 3.2 000/106] 3.2.93-rc1 review

[Ben Hutchings]

This is the start of the stable review cycle for the 3.2.93 release.
There are 106 patches in this series, which will be posted as responses
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Tue Sep 12 12:00:00 UTC 2017.
Anything received after that time might be too late.

A combined patch relative to 3.2.92 will be posted as an additional
response to this.  A shortlog and diffstat can be found below.

Ben.

-------------

Al Viro (4):
      excessive checks in ufs_write_failed() and ufs_evict_inode()
         [babef37dccbaa49249a22bae9150686815d7be71]
      fix ufs_isblockset()
         [414cf7186dbec29bd946c138d6b5c09da5955a08]
      osf_wait4(): fix infoleak
         [a8c39544a6eb2093c04afd5005b6192bd0e880c6]
      ufs: set correct ->s_maxsize
         [6b0d144fa758869bdd652c50aa41aaf601232550]

Alan Stern (2):
      USB: ene_usb6250: fix DMA to the stack
         [628c2893d44876ddd11602400c70606ade62e129]
      USB: xhci: fix lock-inversion problem
         [63aea0dbab90a2461faaae357cbc8cfd6c8de9fe]

Alex Deucher (1):
      drm/radeon: add a quirk for Toshiba Satellite L20-183
         [acfd6ee4fa7ebeee75511825fe02be3f7ac1d668]

Alexander Sverdlin (1):
      dmaengine: ep93xx: Always start from BASE0
         [0037ae47812b1f431cc602100d1d51f37d77b61e]

Alexander Tsoy (1):
      ALSA: hda - apply STAC_9200_DELL_M22 quirk for Dell Latitude D430
         [1fc2e41f7af4572b07190f9dec28396b418e9a36]

Andrew Lunn (1):
      net: phy: marvell: Limit errata to 88m1101
         [f2899788353c13891412b273fdff5f02d49aa40f]

Anthony Mallet (1):
      USB: serial: ftdi_sio: fix setting latency for unprivileged users
         [bb246681b3ed0967489a7401ad528c1aaa1a4c2e]

Ben Hutchings (2):
      ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()
         [6e80ac5cc992ab6256c3dae87f7e57db15e1a58c]
      net: add kfree_skb_list()
         [bd8a7036c06cf15779b31a5397d4afcb12be81ea]

Chris Brandt (2):
      usb: r8a66597-hcd: decrease timeout
         [dd14a3e9b92ac6f0918054f9e3477438760a4fa6]
      usb: r8a66597-hcd: select a different endpoint on timeout
         [1f873d857b6c2fefb4dada952674aa01bcfb92bd]

Christoph Lameter (1):
      mm: fix move/migrate_pages() race on task struct
         [3268c63eded4612a3d07b56d1e02ce7731e6608e]

Christophe JAILLET (1):
      [media] vb2: Fix an off by one error in 'vb2_plane_vaddr'
         [5ebb6dd36c9f5fb37b1077b393c254d70a14cb46]

Corentin Labbe (1):
      usb: xhci: ASMedia ASM1042A chipset need shorts TX quirk
         [d2f48f05cd2a2a0a708fbfa45f1a00a87660d937]

Dan Carpenter (5):
      block: fix an error code in add_partition()
         [7bd897cfce1eb373892d35d7f73201b0f9b221c4]
      drm/vmwgfx: Handle vmalloc() failure in vmw_local_fifo_reserve()
         [f0c62e9878024300319ba2438adc7b06c6b9c448]
      libceph: NULL deref on crush_decode() error path
         [293dffaad8d500e1a5336eeb90d544cf40d4fbd8]
      xfrm: NULL dereference on allocation failure
         [e747f64336fc15e1c823344942923195b800aa1e]
      xfrm: Oops on error in pfkey_msg2xfrm_state()
         [1e3d0c2c70cd3edb5deed186c5f5c75f2b84a633]

Daniel Drake (1):
      Input: i8042 - add Fujitsu Lifebook AH544 to notimeout list
         [817ae460c784f32cd45e60b2b1b21378c3c6a847]

David S. Miller (1):
      ipv6: Fix leak in ipv6_gso_segment().
         [e3e86b5119f81e5e2499bea7ea1ebe8ac6aab789]

Eric Biggers (1):
      KEYS: fix dereferencing NULL payload with nonzero length
         [5649645d725c73df4302428ee4e02c869248b4c5]

Eric Dumazet (2):
      net: ping: do not abuse udp_poll()
         [77d4b1d36926a9b8387c6b53eeba42bcaaffcea3]
      net: prevent sign extension in dev_get_stats()
         [6f64ec74515925cced6df4571638b5a099a49aae]

Eric W. Biederman (1):
      signal: Only reschedule timers on signals timers have sent
         [57db7e4a2d92c2d3dfbca4ef8057849b2682436b]

Felipe Balbi (1):
      usb: host: xhci: simplify irq handler return
         [76a35293b901915c5dcb4a87a4a0da8d7caf39fe]

Gilad Ben-Yossef (1):
      crypto: gcm - wait for crypto op not signal safe
         [f3ad587070d6bd961ab942b3fd7a85d00dfc934b]

Gleb Natapov (1):
      KVM: x86: fix use of uninitialized memory as segment descriptor in emulator.
         [378a8b099fc207ddcb91b19a8c1457667e0af398]

Ilya Matveychikov (1):
      lib/cmdline.c: fix get_options() overflow while parsing ranges
         [a91e0f680bcd9e10c253ae8b62462a38bd48f09f]

Jan Kara (2):
      ext4: fix data corruption for mmap writes
         [a056bdaae7a181f7dcc876cfab2f94538e508709]
      ext4: fix fdatasync(2) after extent manipulation operations
         [67a7d5f561f469ad2fa5154d2888258ab8e6df7c]

Jann Horn (1):
      ptrace: use fsuid, fsgid, effective creds for fs access checks
         [caaee6234d05a58c5b4d05e7bf766131b810a657]

Johan Hovold (13):
      USB: gadget: dummy_hcd: fix hub-descriptor removable fields
         [d81182ce30dbd497a1e7047d7fda2af040347790]
      USB: hub: fix SS hub-descriptor handling
         [2c25a2c818023df64463aac3288a9f969491e507]
      USB: hub: fix SS max number of ports
         [93491ced3c87c94b12220dbac0527e1356702179]
      USB: hub: fix non-SS hub-descriptor handling
         [bec444cd1c94c48df409a35ad4e5b143c245c3f7]
      USB: iowarrior: fix info ioctl on big-endian hosts
         [dd5ca753fa92fb736b1395db892bd29f78e6d408]
      USB: serial: io_ti: fix div-by-zero in set_termios
         [6aeb75e6adfaed16e58780309613a578fe1ee90b]
      USB: serial: ir-usb: fix big-endian baud-rate debug printk
         [ad0ccac76dcc92c3331f4c94c9fc54f8bf1ab20c]
      USB: serial: mct_u232: fix big-endian baud-rate handling
         [26cede343656c0bc2c33cdc783771282405c7fb2]
      USB: usbip: fix nonconforming hub descriptor
         [ec963b412a54aac8e527708ecad06a6988a86fb4]
      net: irda: irda-usb: fix firmware name on big-endian hosts
         [75cf067953d5ee543b3bda90bbfcbee5e1f94ae8]
      of: fdt: add missing allocation-failure check
         [49e67dd17649b60b4d54966e18ec9c80198227f0]
      uwb: fix device quirk on big-endian hosts
         [41318a2b82f5d5fe1fb408f6d6e0b22aa557111d]
      watchdog: pcwd_usb: fix NULL-deref at probe
         [46c319b848268dab3f0e7c4a5b6e9146d3bca8a4]

Johannes Thumshirn (1):
      scsi: qla2xxx: don't disable a not previously enabled PCI device
         [ddff7ed45edce4a4c92949d3c61cd25d229c4a14]

Julius Werner (2):
      drivers: char: mem: Check for address space wraparound with mmap()
         [b299cde245b0b76c977f4291162cf668e087b408]
      drivers: char: mem: Fix wraparound check to allow mappings up to the end
         [32829da54d9368103a2f03269a5120aa9ee4d5da]

Konstantin Khlebnikov (1):
      ext4: keep existing extra fields when inode expands
         [887a9730614727c4fff7cb756711b190593fc1df]

Linus Torvalds (1):
      Sanitize 'move_pages()' permission checks
         [197e7e521384a23b9e585178f3f11c9fa08274b9]

Liping Zhang (1):
      netfilter: ctnetlink: fix incorrect nf_ct_put during hash resize
         [fefa92679dbe0c613e62b6c27235dcfbe9640ad1]

Marcin Nowakowski (1):
      MIPS: kprobes: flush_insn_slot should flush only if probe initialised
         [698b851073ddf5a894910d63ca04605e0473414e]

Mathias Nyman (2):
      xhci: apply PME_STUCK_QUIRK and MISSING_CAS quirk for Denverton
         [a0c16630d35a874e82bdf2088f58ecaca1024315]
      xhci: workaround for hosts missing CAS bit
         [346e99736c3ce328fd42d678343b70243aca5f36]

Max Filippov (1):
      net: ethoc: enable NAPI before poll may be scheduled
         [d220b942a4b6a0640aee78841608f4aa5e8e185e]

Michael Ellerman (1):
      powerpc/mm: Fix virt_addr_valid() etc. on 64-bit hash
         [e41e53cd4fe331d0d1f06f8e4ed7e2cc63ee2c34]

Naveen N. Rao (1):
      powerpc/kprobes: Pause function_graph tracing during jprobes handling
         [a9f8553e935f26cb5447f67e280946b0923cd2dc]

NeilBrown (1):
      autofs: sanity check status reported with AUTOFS_DEV_IOCTL_FAIL
         [9fa4eb8e490a28de40964b1b0e583d8db4c7e57c]

Nicholas Bellinger (1):
      configfs: Fix race between create_link and configfs_rmdir
         [ba80aa909c99802c428682c352b0ee0baac0acd3]

Nicholas Piggin (1):
      powerpc/64: Initialise thread_info for emergency stacks
         [34f19ff1b5a0d11e46df479623d6936460105c9f]

Patrik Jakobsson (1):
      drm/gma500/psb: Actually use VBT mode when it is found
         [82bc9a42cf854fdf63155759c0aa790bd1f361b0]

Paul Burton (1):
      MIPS: Fix IRQ tracing & lockdep when rescheduling
         [d8550860d910c6b7b70f830f59003b33daaa52c9]

Paul Moore (1):
      selinux: fix double free in selinux_parse_opts_str()
         [023f108dcc187e34ef864bf10ed966cf25e14e2a]

Peter Chen (1):
      usb: host: xhci-mem: allocate zeroed Scratchpad Buffer
         [7480d912d549f414e0ce39331870899e89a5598c]

Peter Ujfalusi (1):
      usb: musb: tusb6010_omap: Do not reset the other direction's packet size
         [6df2b42f7c040d57d9ecb67244e04e905ab87ac6]

Radim KrÄmÃÅ (1):
      KVM: x86: zero base3 of unusable segments
         [f0367ee1d64d27fa08be2407df5c125442e885e3]

Rajkumar Manoharan (1):
      mac80211: strictly check mesh address extension mode
         [5667c86acf021e6dcf02584408b4484a273ac68f]

Roger Pau Monne (1):
      xen: fix bio vec merging
         [462cdace790ac2ed6aad1b19c9c0af0143b6aab0]

Russell King (1):
      net: phy: fix marvell phy status reading
         [898805e0cdf7fd860ec21bf661d3a0285a3defbd]

Sabrina Dubroca (2):
      tracing/kprobes: Allow to create probe with a module name starting with a digit
         [9e52b32567126fe146f198971364f68d3bc5233f]
      xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICY
         [9b3eb54106cf6acd03f07cf0ab01c13676a226c2]

Sasha Levin (2):
      mm: fix NULL ptr dereference in migrate_pages
         [f2a9ef880763d7fbd657a3af646e132a90d70d34]
      mm: fix NULL ptr dereference in move_pages
         [6e8b09eaf268bceac0c62e389b4bc0cb83dfb8e5]

Sean Young (1):
      [media] rc-core: race condition during ir_raw_event_register()
         [963761a0b2e85663ee4a5630f72930885a06598a]

Sebastian Reichel (1):
      i2c: i2c-tiny-usb: fix buffer not being DMA capable
         [5165da5923d6c7df6f2927b0113b2e4d9288661e]

SeongJae Park (6):
      perf probe: Fix examples section of documentation
         [d89269a89ebb6a74512f3f40e89cd12017f60a75]
      perf script python: Fix wrong code snippets in documentation
         [26ddb8722df865aa67fbe459107d2f3f8e5c6829]
      perf script python: Remove dups in documentation examples
         [14fc42fa1b3e7ea5160c84d0e686a3a0c1ffe619]
      perf script python: Updated trace_unhandled() signature
         [1bf8d5a4a5da19b1f6e7958fe67db4118fa7a1c1]
      perf script: Fix documentation errors
         [34d4453dac257be53c21abf2f713c992fb692b5c]
      perf script: Fix outdated comment for perf-trace-python
         [c76132dc5182776b98e946d674cb41c421661ea9]

Serhey Popovych (1):
      rtnetlink: add IFLA_GROUP to ifla_policy
         [db833d40ad3263b2ee3b59a1ba168bb3cfed8137]

Soheil Hassas Yeganeh (1):
      tcp: eliminate negative reordering in tcp_clean_rtx_queue
         [bafbb9c73241760023d8981191ddd30bb1c6dbac]

Steffen Klassert (1):
      af_key: Fix slab-out-of-bounds in pfkey_compile_policy.
         [d90c902449a7561f1b1d58ba5a0d11728ce8b0b2]

Sui Chen (1):
      ahci: Acer SA5-271 SSD Not Detected Fix
         [8bfd174312629866efa535193d9e563768ff4307]

Takashi Iwai (1):
      ASoC: Fix use-after-free at card unregistration
         [4efda5f2130da033aeedc5b3205569893b910de2]

Thinh Nguyen (1):
      usb: gadget: f_mass_storage: Serialize wake and sleep execution
         [dc9217b69dd6089dcfeb86ed4b3c671504326087]

Thomas Gleixner (3):
      alarmtimer: Prevent overflow of relative timers
         [f4781e76f90df7aec400635d73ea4c35ee1d4765]
      alarmtimer: Rate limit periodic intervals
         [ff86bf0c65f14346bf2440534f9ba5ac232c39a0]
      tracing/kprobes: Enforce kprobes teardown after testing
         [30e7d894c1478c88d50ce94ddcdbd7f9763d9cdd]

Uwe Kleine-KÃnig (1):
      net: ethernet: ax88796: don't call free_irq without request_irq first
         [82533ad9a1ce3a7a6863849a552c2cc041b55e0d]

Vamsi Krishna Samavedam (1):
      USB: core: replace %p with %pK
         [2f964780c03b73de269b08d12aff96a9618d13f3]

Vladis Dronov (1):
      xfrm: policy: check policy direction value
         [7bab09631c2a303f87a7eb7e3d69e888673b9b7e]

WANG Cong (1):
      ipv6: avoid unregistering inet6_dev for loopback
         [60abc0be96e00ca71bac083215ac91ad2e575096]

Wan Ahmad Zainie (1):
      usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake
         [6c97cfc1a097b1e0786c836e92b7a72b4d031e25]

Wanpeng Li (3):
      KVM: X86: Fix read out-of-bounds vulnerability in kvm pio emulation
         [cbfc6c9184ce71b52df4b1d82af5afc81a709178]
      KVM: async_pf: avoid async pf injection when in guest mode
         [9bc1f09f6fa76fdf31eb7d6a4a4df43574725f93]
      KVM: cpuid: Fix read/write out-of-bounds vulnerability in cpuid emulation
         [a3641631d14571242eec0d30c9faa786cbf52d44]

Wei Wang (1):
      tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0
         [499350a5a6e7512d9ed369ed63a4244b6536f4f8]

Yu Zhao (1):
      swap: cond_resched in swap_cgroup_prepare()
         [ef70762948dde012146926720b70e79736336764]

Yuchung Cheng (1):
      tcp: avoid fragmenting peculiar skbs in SACK
         [b451e5d24ba6687c6f0e7319c727a709a1846c06]

Zhaowei Yuan (1):
      [media] vb2: fix plane index sanity check in vb2_plane_cookie()
         [a9ae4692eda4b99f85757b15d60971ff78a0a0e2]

 Makefile                                           |  4 +-
 arch/alpha/kernel/osf_sys.c                        |  6 +-
 arch/mips/include/asm/kprobes.h                    |  3 +-
 arch/mips/kernel/entry.S                           |  3 +
 arch/powerpc/include/asm/page.h                    | 12 +++
 arch/powerpc/kernel/kprobes.c                      | 12 +++
 arch/powerpc/kernel/setup_64.c                     | 25 ++++++
 arch/x86/kvm/mmu.c                                 |  7 +-
 arch/x86/kvm/mmu.h                                 |  1 +
 arch/x86/kvm/x86.c                                 | 53 ++++++++-----
 crypto/gcm.c                                       |  6 +-
 drivers/ata/ahci.c                                 | 38 +++++++++
 drivers/char/mem.c                                 |  5 ++
 drivers/dma/ep93xx_dma.c                           |  2 +
 drivers/gpu/drm/radeon/radeon_combios.c            |  7 ++
 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c               |  2 +
 drivers/i2c/busses/i2c-tiny-usb.c                  | 25 +++++-
 drivers/input/serio/i8042-x86ia64io.h              |  7 ++
 drivers/media/rc/ir-raw.c                          | 13 ++--
 drivers/media/video/videobuf2-core.c               |  4 +-
 drivers/net/ethernet/8390/ax88796.c                |  7 +-
 drivers/net/ethernet/ethoc.c                       |  3 +-
 drivers/net/irda/irda-usb.c                        |  2 +-
 drivers/net/phy/marvell.c                          | 68 ++++++++--------
 drivers/of/fdt.c                                   |  2 +
 drivers/scsi/qla2xxx/qla_os.c                      |  8 +-
 drivers/staging/gma500/psb_intel_lvds.c            | 18 +++--
 drivers/staging/usbip/vhci_hcd.c                   | 11 ++-
 drivers/usb/core/devio.c                           |  4 +-
 drivers/usb/core/hcd.c                             |  4 +-
 drivers/usb/core/hub.c                             | 28 +++++--
 drivers/usb/gadget/dummy_hcd.c                     |  6 +-
 drivers/usb/gadget/f_mass_storage.c                | 13 +++-
 drivers/usb/host/r8a66597-hcd.c                    |  6 +-
 drivers/usb/host/xhci-hub.c                        | 37 +++++++++
 drivers/usb/host/xhci-mem.c                        |  2 +-
 drivers/usb/host/xhci-pci.c                        | 16 +++-
 drivers/usb/host/xhci-ring.c                       | 37 +++++----
 drivers/usb/host/xhci.h                            |  3 +
 drivers/usb/misc/iowarrior.c                       |  2 +-
 drivers/usb/musb/tusb6010_omap.c                   | 13 +++-
 drivers/usb/serial/ftdi_sio.c                      |  2 +-
 drivers/usb/serial/io_ti.c                         |  5 +-
 drivers/usb/serial/ir-usb.c                        | 21 ++---
 drivers/usb/serial/mct_u232.c                      |  2 +-
 drivers/usb/storage/ene_ub6250.c                   | 90 +++++++++++++---------
 drivers/uwb/i1480/dfu/usb.c                        |  5 +-
 drivers/watchdog/pcwd_usb.c                        |  3 +
 drivers/xen/biomerge.c                             |  3 +-
 fs/autofs4/dev-ioctl.c                             |  2 +-
 fs/configfs/symlink.c                              |  3 +-
 fs/ext4/extents.c                                  |  2 +
 fs/ext4/inode.c                                    | 31 ++++++--
 fs/partitions/check.c                              |  4 +-
 fs/proc/array.c                                    |  2 +-
 fs/proc/base.c                                     | 12 +--
 fs/proc/namespaces.c                               |  4 +-
 fs/ufs/inode.c                                     |  5 +-
 fs/ufs/super.c                                     | 18 +++++
 fs/ufs/truncate.c                                  |  6 --
 fs/ufs/util.h                                      | 10 ++-
 include/linux/kprobes.h                            |  4 +-
 include/linux/ptrace.h                             | 24 +++++-
 include/linux/skbuff.h                             |  1 +
 include/linux/usb/ch11.h                           |  3 +
 include/net/xfrm.h                                 | 10 ---
 kernel/events/core.c                               |  2 +-
 kernel/futex.c                                     |  2 +-
 kernel/futex_compat.c                              |  2 +-
 kernel/kprobes.c                                   |  2 +-
 kernel/ptrace.c                                    | 39 ++++++++--
 kernel/signal.c                                    | 20 +++--
 kernel/time/alarmtimer.c                           | 12 ++-
 kernel/trace/trace_kprobe.c                        | 18 +++--
 lib/cmdline.c                                      |  6 +-
 mm/mempolicy.c                                     | 29 ++++---
 mm/migrate.c                                       | 45 +++++------
 mm/page_cgroup.c                                   |  3 +
 mm/process_vm_access.c                             |  2 +-
 net/ceph/osdmap.c                                  |  1 +
 net/core/dev.c                                     |  2 +-
 net/core/rtnetlink.c                               |  2 +
 net/core/skbuff.c                                  | 20 +++--
 net/ipv4/af_inet.c                                 |  2 +-
 net/ipv4/tcp.c                                     |  4 +
 net/ipv4/tcp_input.c                               | 11 +--
 net/ipv6/addrconf.c                                |  5 +-
 net/ipv6/af_inet6.c                                |  4 +-
 net/ipv6/xfrm6_mode_ro.c                           |  2 +
 net/ipv6/xfrm6_mode_transport.c                    |  2 +
 net/key/af_key.c                                   | 19 +++--
 net/mac80211/rx.c                                  |  3 +-
 net/netfilter/nf_conntrack_netlink.c               |  7 +-
 net/wireless/util.c                                | 14 +++-
 net/xfrm/xfrm_policy.c                             | 51 ++----------
 security/commoncap.c                               |  7 +-
 security/keys/keyctl.c                             |  4 +-
 security/selinux/hooks.c                           |  5 +-
 sound/pci/hda/patch_sigmatel.c                     |  2 +
 sound/soc/soc-core.c                               |  5 +-
 tools/perf/Documentation/perf-probe.txt            |  8 +-
 tools/perf/Documentation/perf-script-perl.txt      |  2 +-
 tools/perf/Documentation/perf-script-python.txt    | 23 +++---
 .../util/scripting-engines/trace-event-python.c    |  2 +-
 104 files changed, 794 insertions(+), 392 deletions(-)

-- 
Ben Hutchings
For every complex problem
there is a solution that is simple, neat, and wrong.