[ANNOUNCE] 4.4.296-rt229

[Daniel Wagner]

[resend from a different mail account. some dkim troubles]

Hello RT-list!

I'm pleased to announce the 4.4.296-rt229 stable release.
This is just an update to the latest stable release. No RT
specific changes.

Known issue:

  - locktorture reports a might_sleep warning for spin_locks test

You can get this release via the git tree at:

  git://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git

  branch: v4.4-rt
  Head SHA1: e74cae7dec172a5ab396b493760686f629389a45

Signing key fingerprint:

  5BF6 7BC5 0826 72CA BB45  ACAE 587C 5ECA 5D0A 306C

Enjoy!
Daniel

Changes from v4.4.292-rt228:
---

Ahmad Fatoum (1):
      watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT

Alan Young (1):
      ALSA: ctl: Fix copy of updated id with element read/write

Aleksander Jan Bajkowski (2):
      MIPS: lantiq: dma: add small delay after reset
      MIPS: lantiq: dma: reset correct number of channel

Alexander Aring (1):
      net: ieee802154: handle iftypes as u32

Alexander Mikhalitsyn (1):
      shm: extend forced shm destroy to support objects from several 
IPC nses

Anant Thazhemadam (1):
      media: usb: dvd-usb: fix uninit-value bug in 
dibusb_read_eeprom_byte()

Anatolij Gustschin (1):
      powerpc/5200: dts: fix memory node unit name

André Almeida (1):
      ACPI: battery: Accept charges over the design capacity as full

Andy Shevchenko (1):
      serial: 8250_dw: Drop wrong use of ACPI_PTR()

Anel Orazgaliyeva (1):
      cpuidle: Fix kobject memory leaks in error paths

Armin Wolf (1):
      hwmon: (dell-smm) Fix warning on /proc/i8k creation error

Arnd Bergmann (5):
      hyperv/vmbus: include linux/bitops.h
      ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
      memstick: avoid out-of-range warning
      ARM: 9156/1: drop cc-option fallbacks for architecture selection
      siphash: use _unaligned version by default

Austin Kim (1):
      ALSA: synth: missing check for possible NULL after the call to 
kstrdup

Baokun Li (2):
      sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
      sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl

Barnabás Pőcze (1):
      platform/x86: wmi: do not fail if disabling fails

Bart Van Assche (1):
      MIPS: sni: Fix the build

Chengfeng Ye (2):
      nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
      ALSA: gus: fix null pointer dereference on pointer block

Christian Löhle (1):
      mmc: dw_mmc: Dont wait for DRTO on Write RSP error

Christophe JAILLET (1):
      platform/x86: hp_accel: Fix an error handling path in 
'lis3lv02d_probe()'

Christophe Leroy (1):
      video: fbdev: chipsfb: use memset_io() instead of memset()

Claudiu Beznea (1):
      dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro

Damien Le Moal (1):
      libata: fix read log timeout value

Dan Carpenter (10):
      b43legacy: fix a lower bounds test
      b43: fix a lower bounds test
      memstick: jmb38x_ms: use appropriate free function in 
jmb38x_ms_alloc_host()
      drm/msm: uninitialized variable in msm_gem_import()
      usb: gadget: hid: fix error code in do_config()
      scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
      staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
      can: sja1000: fix use after free in ems_pcmcia_add_card()
      net: altera: set a couple error code in probe()
      net/qla3xxx: fix an error code in ql_adapter_up()

Daniel Jordan (1):
      crypto: pcrypt - Delay write to padata->info

Daniel Wagner (2):
      Merge tag 'v4.4.296' into v4.4-rt
      Linux 4.4.296-rt229

Daniele Palmas (2):
      USB: serial: option: add Telit LE910S1 0x9200 composition
      USB: serial: option: add Telit FN990 compositions

David Hildenbrand (1):
      proc/vmcore: fix clearing user buffer by properly using clear_user()

Davidlohr Bueso (1):
      block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)

Dirk Bender (1):
      media: mt9p031: Fix corrupted frame after restarting stream

Dongli Zhang (2):
      xen/netfront: stop tx queues during live migration
      vmxnet3: do not stop tx queues after netif_device_detach()

Dongliang Mu (2):
      JFS: fix memleak in jfs_mount
      memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe

Eiichi Tsukata (1):
      vsock: prevent unnecessary refcnt inc for nonblocking connect

Eric Badger (1):
      EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell

Eric Biggers (3):
      wait: add wake_up_pollfree()
      binder: use wake_up_pollfree()
      signalfd: use wake_up_pollfree()

Eric Dumazet (3):
      llc: fix out-of-bound array index in llc_sk_dev_hash()
      tcp_cubic: fix spurious Hystart ACK train detections for 
not-cwnd-limited flows
      net, neigh: clear whole pneigh_entry at alloc time

Eric W. Biederman (1):
      signal: Remove the bogus sigkill_pending in ptrace_stop

Felix Fietkau (1):
      mac80211: send ADDBA requests using the tid/queue of the 
aggregation session

Filipe Manana (1):
      btrfs: fix lost error handling when replaying directory deletes

Florian Fainelli (2):
      ARM: dts: BCM5301X: Add interrupt properties to GPIO node
      net: systemport: Add global locking for descriptor lifecycle

Florian Westphal (1):
      netfilter: nfnetlink_queue: fix OOB when mac header was cleared

Giovanni Cabiddu (1):
      crypto: qat - detect PFVF collision after ACK

Greg Kroah-Hartman (13):
      Linux 4.4.293
      Linux 4.4.294
      HID: add hid_is_usb() function to make it simpler for USB detection
      HID: add USB_HID dependancy to hid-prodikeys
      HID: add USB_HID dependancy to hid-chicony
      HID: add USB_HID dependancy on some USB HID drivers
      HID: wacom: fix problems when device is not a valid USB device
      HID: check for valid USB device for many HID drivers
      USB: gadget: detect too-big endpoint 0 requests
      USB: gadget: zero allocate endpoint 0 buffers
      Linux 4.4.295
      USB: gadget: bRequestType is a bitfield, not a enum
      Linux 4.4.296

Guanghui Feng (1):
      tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc

Guo Zhi (1):
      scsi: advansys: Fix kernel pointer leak

Hannes Reinecke (1):
      libata: add horkage for ASMedia 1092

Harshit Mogalapalli (1):
      net: netlink: af_netlink: Prevent empty skb by adding a check on len.

Helge Deller (3):
      parisc: Fix ptrace check on syscall return
      parisc: Fix "make install" on newer debian releases
      parisc/agp: Annotate parisc agp init functions with __init

Henrik Grimler (1):
      power: supply: max17042_battery: use VFSOC for capacity when no rsns

Huang Guobin (1):
      bonding: Fix a use-after-free problem when bond_sysfs_slave_add() 
failed

Ingmar Klein (1):
      PCI: Mark Atheros QCA6174 to avoid bus reset

J. Bruce Fields (1):
      nfsd: fix use-after-free due to delegation race

Jackie Liu (1):
      ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()

Jakob Hauser (1):
      power: supply: rt5033_battery: Change voltage values to µV

Jakub Kicinski (1):
      net: stream: don't purge sk_error_queue in sk_stream_kill_queues()

James Smart (1):
      scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()

Jan Kara (1):
      ocfs2: fix data corruption on truncate

Jason Gerecke (1):
      HID: introduce hid_is_using_ll_driver

Jens Axboe (1):
      fs: add fget_many() and fput_many()

Jerome Marchand (1):
      recordmcount.pl: look for jgnop instruction as well as bcrl on s390

Joakim Zhang (1):
      net: fec: only clear interrupt of handling queue in 
fec_enet_rx_queue()

Joe Thornber (1):
      dm btree remove: fix use after free in rebalance_children()

Johan Hovold (9):
      ALSA: ua101: fix division by zero at probe
      ALSA: 6fire: fix control and bulk message timeouts
      ALSA: line6: fix control and interrupt message timeouts
      mwifiex: fix division by zero in fw download path
      ath6kl: fix division by zero in send path
      ath6kl: fix control-message timeout
      USB: iowarrior: fix control-message timeouts
      USB: chipidea: fix interrupt deadlock
      drm/udl: fix control-message timeout

Johannes Berg (1):
      iwlwifi: mvm: disable RX-diversity in powersave

Jonas Dreßler (2):
      mwifiex: Read a PCI register after writing the TX ring write pointer
      mwifiex: Send DELBA requests according to spec

Juergen Gross (13):
      xen: sync include/xen/interface/io/ring.h with Xen's newest version
      xen/blkfront: read response from backend only once
      xen/blkfront: don't take local copy of a request from the ring page
      xen/blkfront: don't trust the backend response data blindly
      xen/netfront: read response from backend only once
      xen/netfront: don't read data from request on the ring page
      xen/netfront: disentangle tx_skb_freelist
      xen/netfront: don't trust the backend response data blindly
      tty: hvc: replace BUG_ON() with negative return value
      xen/blkfront: harden blkfront against event channel storms
      xen/netfront: harden netfront against event channel storms
      xen/console: harden hvc_xen against event channel storms
      xen/netback: don't queue unlimited number of packages

Kees Cook (1):
      media: si470x: Avoid card name truncation

Krzysztof Kozlowski (1):
      nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done

Lars-Peter Clausen (4):
      iio: stk3310: Don't return error code in interrupt handler
      iio: mma8452: Fix trigger reference couting
      iio: ltr501: Don't return error code in trigger handler
      iio: itg3200: Call iio_trigger_notify_done() on error

Lasse Collin (2):
      lib/xz: Avoid overlapping memcpy() with invalid input with 
in-place decompression
      lib/xz: Validate the value before assigning it to an enum variable

Lee Jones (2):
      staging: ion: Prevent incorrect reference counting behavour
      net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero

Leon Romanovsky (1):
      RDMA/mlx4: Return missed an error if device doesn't support steering

Letu Ren (1):
      igbvf: fix double free in `igbvf_probe`

Lin Ma (3):
      NFC: reorganize the functions in nci_request
      NFC: reorder the logic in nfc_{un,}register_device
      NFC: add NCI_UNREG flag to eliminate the race

Linus Lüssing (5):
      ath9k: Fix potential interrupt storm on queue reset
      batman-adv: Fix multicast TT issues with bogus ROAM flags
      batman-adv: mcast: fix duplicate mcast packets in BLA backbone 
from LAN
      batman-adv: mcast: fix duplicate mcast packets in BLA backbone 
from mesh
      batman-adv: mcast: fix duplicate mcast packets from BLA backbone 
to mesh

Linus Torvalds (1):
      fget: check that the fd still exists after getting a ref to it

Loic Poulain (1):
      wcn36xx: Fix HT40 capability for 2Ghz band

Lu Wei (1):
      maple: fix wrong return value of maple_bus_init().

Maciej W. Rozycki (1):
      vgacon: Propagate console boot parameters before calling `vc_resize'

Manjong Lee (1):
      mm: bdi: initialize bdi_min_ratio when bdi is unregistered

Masami Hiramatsu (2):
      ARM: clang: Do not rely on lr register for stacktrace
      kprobes: Limit max data_size of the kretprobe instances

Mathias Nyman (3):
      xhci: Fix USB 3.1 enumeration issues by increasing roothub 
power-on-good delay
      usb: hub: Fix usb enumeration issue due to address0 race
      usb: hub: Fix locking issues with address0_mutex

Maxim Kiselev (1):
      net: davinci_emac: Fix interrupt pacing disable

Michael Ellerman (1):
      powerpc/dcr: Use cmplwi instead of 3-argument cmpli

Mike Christie (3):
      scsi: target: Fix ordered tag handling
      scsi: target: Fix alua_tg_pt_gps_count tracking
      scsi: iscsi: Unblock session then wake up error handler

Mike Kravetz (1):
      hugetlb: take PMD sharing into account when flushing tlb/caches

Miklos Szeredi (2):
      fuse: fix page stealing
      fuse: release pipe buf after last use

Mingjie Zhang (1):
      USB: serial: option: add Fibocom FM101-GL variants

Nadav Amit (1):
      hugetlbfs: flush TLBs correctly after huge_pmd_unshare

Nathan Chancellor (5):
      platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
      hexagon: export raw I/O routines for modules
      soc/tegra: fuse: Fix bitwise vs. logical OR warning
      net: lan78xx: Avoid unnecessary self assignment
      Input: touchscreen - avoid bitwise vs logical OR warning

Nguyen Dinh Phi (1):
      cfg80211: call cfg80211_stop_ap when switch from P2P_GO type

Nick Desaulniers (1):
      sh: check return code of request_irq

Nicolas Dichtel (1):
      tun: fix bonding active backup with arp monitoring

Nicolas Pitre (1):
      ARM: 8805/2: remove unneeded naked function usage

Nikolay Borisov (1):
      btrfs: fix memory ordering between normal and ordered work functions

Ondrej Jirman (1):
      i2c: rk3x: Handle a spurious start completion interrupt flag

Pali Rohár (1):
      PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros

Pavel Hofman (1):
      usb: core: config: fix validation of wMaxPacketValue entries

Pavel Skripkin (4):
      ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
      media: dvb-usb: fix ununit-value in az6027_rc_query
      net: batman-adv: fix error handling
      net: bnx2x: fix variable dereferenced before check

Pawan Gupta (1):
      smackfs: Fix use-after-free in netlbl_catmap_walk()

Pekka Korpinen (1):
      iio: dac: ad5446: Fix ad5622_write() return value

Peter Zijlstra (1):
      x86: Increase exception stack sizes

Phoenix Huang (1):
      Input: elantench - fix misreporting trackpoint coordinates

Pierre Gondois (1):
      serial: pl011: Add ACPI SBSA UART match id

Quinn Tran (1):
      scsi: qla2xxx: Turn off target reset during issue_lip

Rafael J. Wysocki (1):
      ACPICA: Avoid evaluating methods too early during system resume

Rajat Asthana (1):
      media: mceusb: return without resubmitting URB in case of -EPROTO 
error.

Randy Dunlap (8):
      mmc: winbond: don't build on M68K
      ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
      m68k: set a default value for MEMORY_RESERVE
      sh: fix kconfig unmet dependency warning for FRAME_POINTER
      sh: define __BIG_ENDIAN for math-emu
      mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
      mips: bcm63xx: add support for clk_get_parent()
      natsemi: xtensa: fix section mismatch warnings

Ricardo Ribalda (1):
      media: uvcvideo: Set capability in s_param

Roger Quadros (1):
      ARM: dts: omap: fix gpmc,mux-add-data type

Rustam Kovhaev (1):
      mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag

Sean Christopherson (1):
      x86/irq: Ensure PI wakeup handler is unregistered before module 
unload

Sean Young (1):
      media: ite-cir: IR receiver stop working after receive overflow

Sebastian Krzyszkowiak (1):
      power: supply: max17042_battery: Prevent int underflow in 
set_soc_threshold

Slark Xiao (1):
      platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after 
S3 deep

Sreekanth Reddy (1):
      scsi: mpt3sas: Fix kernel panic during drive powercycle test

Stefano Stabellini (2):
      xen: don't continue xenstore initialization in case of errors
      xen: detect uninitialized xenbus in xenbus_init

Steven Rostedt (VMware) (4):
      tracefs: Have tracefs directories not set OTH permission bits by 
default
      tracing: Check pid filtering when creating events
      tracefs: Have new files inherit the ownership of their parent
      tracefs: Set all files to the same group ownership as the mount 
option

Sven Eckelmann (7):
      batman-adv: Keep fragments equally sized
      batman-adv: Prevent duplicated softif_vlan entry
      batman-adv: Consider fragmentation for needed_headroom
      batman-adv: Reserve needed_*room for fragments
      batman-adv: Don't always reallocate the fragmentation skb head
      batman-adv: Avoid WARN_ON timing related checks
      tty: serial: msm_serial: Deactivate RX DMA for polling support

Sven Schnelle (4):
      parisc: fix warning in flush_tlb_all
      parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
      parisc/entry: fix trace test in syscall exit path
      parisc/sticon: fix reverse colors

Tadeusz Struk (1):
      nfc: fix segfault in nfc_genl_dump_devices_done

Taehee Yoo (1):
      batman-adv: set .owner to THIS_MODULE

Takashi Iwai (11):
      Input: i8042 - Add quirk for Fujitsu Lifebook T725
      ALSA: timer: Unconditionally unlink slave instances, too
      ALSA: mixer: oss: Fix racy access to slots
      Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
      ASoC: DAPM: Cover regression by kctl change notification fix
      ALSA: ctxfi: Fix out-of-range access
      ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
      ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
      ALSA: pcm: oss: Fix negative period/buffer sizes
      ALSA: pcm: oss: Limit the period size to 16MB
      ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()

Teng Qi (1):
      net: ethernet: dec: tulip: de4x5: fix possible array overflows in 
type3_infoblock()

Tetsuo Handa (2):
      smackfs: use __GFP_NOFAIL for smk_cipso_doi()
      smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi

Thomas Gleixner (2):
      PCI/MSI: Destroy sysfs before freeing entries
      PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error

Thomas Perrot (1):
      spi: spl022: fix Microwire full duplex mode

Todd Kjos (3):
      binder: use euid from cred instead of using task
      binder: use cred instead of task for selinux checks
      binder: fix test regression due to sender_euid change

Tong Zhang (1):
      scsi: dc395: Fix error case unwinding

Trond Myklebust (1):
      NFSv42: Don't fail clone() unless the OP_CLONE operation failed

Tuo Li (2):
      media: s5p-mfc: fix possible null-pointer dereference in 
s5p_mfc_probe()
      ath: dfs_pattern_detector: Fix possible null-pointer dereference 
in channel_detector_create()

Uwe Kleine-König (1):
      usb: max-3421: Use driver data instead of maintaining a list of 
bound devices

Vasily Averin (1):
      mm, oom: pagefault_out_of_memory: don't force global OOM for 
dying tasks

Vasily Gorbik (1):
      s390/setup: avoid using memblock_enforce_memory_limit

Vincent Donnefort (1):
      sched/core: Mitigate race 
cpus_share_cache()/update_top_cache_domain()

Vincent Mailhol (1):
      can: pch_can: pch_can_rx_normal: fix use after free

Vladimir Murzin (1):
      irqchip: nvic: Fix offset for Interrupt Priority Offsets

Wang Hai (3):
      USB: serial: keyspan: fix memleak on probe errors
      libertas_tf: Fix possible memory leak in probe and disconnect
      libertas: Fix possible memory leak in probe and disconnect

Wang ShaoBo (1):
      Bluetooth: fix use-after-free error in lock_sock_nested()

Wang Wensheng (1):
      ALSA: timer: Fix use-after-free problem

Wudi Wang (1):
      irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL

Yang Yingliang (3):
      usb: musb: tusb6010: check return value after calling 
platform_get_resource()
      usb: host: ohci-tmio: check return value after calling 
platform_get_resource()
      iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove

Ye Bin (1):
      PM: hibernate: Get block device exclusively in swsusp_check()

Yu Liao (1):
      timekeeping: Really make sure wall_to_monotonic isn't positive

YueHaibing (1):
      xen-pciback: Fix return in pm_ctrl_init()

Zev Weiss (1):
      hwmon: (pmbus/lm25066) Add offset coefficients

Zhang Yi (2):
      quota: check block number when reading the block in quota file
      quota: correct error number in free_dqentry()

Zheyu Ma (3):
      media: netup_unidvb: handle interrupt properly according to the 
firmware
      memstick: r592: Fix a UAF bug when removing the driver
      mwl8k: Fix use-after-free in mwl8k_fw_state_machine()

Zhou Qingyang (1):
      net: qlogic: qlcnic: Fix a NULL pointer dereference in 
qlcnic_83xx_add_rings()

hongao (1):
      drm/amdgpu: fix set scaling mode Full/Full aspect/Center not 
works on vga and dvi connectors

liuguoqiang (1):
      net: return correct error code

zhangyue (1):
      net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' 
may be out of bound