[PATCH 3.4 099/125] xen/pciback: Do not install an IRQ handler for MSI interrupts.

2016-10-12 Thread lizf
From: Konrad Rzeszutek Wilk 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit a396f3a210c3a61e94d6b87ec05a75d0be2a60d0 upstream. Otherwise an guest can subvert the generic MSI code to trigger an BUG_ON condition during MSI interrupt freeing

[PATCH 3.4 105/125] parisc: Fix syscall restarts

2016-10-12 Thread lizf
opy the syscall number to regX prior returning to userspace for the syscall restart. Signed-off-by: Helge Deller Cc: Mathieu Desnoyers [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- arch/parisc/kernel/signal.c | 67 +++-- 1 f

[PATCH 3.4 081/125] mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't make any progress

2016-10-12 Thread lizf
Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- mm/backing-dev.c | 19 --- mm/vmstat.c | 6 -- 2 files changed, 20 insertions(+), 5 deletions(-) diff --git a/mm/backing-dev.c b/mm/back

[PATCH 3.4 070/125] usb: xhci: fix config fail of FS hub behind a HS hub with MTT

2016-10-12 Thread lizf
From: Chunfeng Yun 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 096b110a3dd3c868e4610937c80d2e3f3357c1a9 upstream. if a full speed hub connects to a high speed hub which supports MTT, the MTT field of its slot context will be set to 1

[PATCH 3.4 110/125] net: possible use after free in dst_release

2016-10-12 Thread lizf
ist and dst_gc_task may dst_destroy it before dst_release gets a chance to access dst->flags. Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()") Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst") Signed-off-by: Francesco Ruggeri Acked-by: Eric Dumazet Signed-off-

[PATCH 3.4 073/125] 9p: ->evict_inode() should kick out ->i_data, not ->i_mapping

2016-10-12 Thread lizf
ing from &inode->i_data instead, as 9p one should. Reported-by: "Suzuki K. Poulose" Tested-by: "Suzuki K. Poulose" Signed-off-by: Al Viro [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- fs/9p/vfs_inode.c | 4 ++-- 1 file changed, 2 insertions(+)

[PATCH 3.4 079/125] ses: fix additional element traversal bug

2016-10-12 Thread lizf
From: James Bottomley 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 5e1033561da1152c57b97ee84371dba2b3d64c25 upstream. KASAN found that our additional element processing scripts drop off the end of the VPD page into unallocated space.

[PATCH 3.4 107/125] ocfs2: fix BUG when calculate new backup super

2016-10-12 Thread lizf
us Torvalds [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- fs/ocfs2/resize.c | 15 --- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/fs/ocfs2/resize.c b/fs/ocfs2/resize.c index ec55add..2ca64fa 100644 --- a/fs/ocfs2/resize.c +++ b/fs/ocfs2/resize.

[PATCH 3.4 077/125] ses: Fix problems with simple enclosures

2016-10-12 Thread lizf
From: James Bottomley 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 3417c1b5cb1fdc10261dbed42b05cc93166a78fd upstream. Simple enclosure implementations (mostly USB) are allowed to return only page 8 to every diagnostic query. That real

[PATCH 3.4 109/125] ftrace/scripts: Fix incorrect use of sprintf in recordmcount

2016-10-12 Thread lizf
From: Colin Ian King 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 713a3e4de707fab49d5aa4bceb77db1058572a7b upstream. Fix build warning: scripts/recordmcount.c:589:4: warning: format not a string literal and no format arguments [-Wform

[PATCH 3.4 106/125] ipv6/addrlabel: fix ip6addrlbl_get()

2016-10-12 Thread lizf
From: Andrey Ryabinin 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit e459dfeeb64008b2d23bdf600f03b3605dbb8152 upstream. ip6addrlbl_get() has never worked. If ip6addrlbl_hold() succeeded, ip6addrlbl_get() will exit with '-ESRCH'. If ip6ad

[PATCH 3.4 074/125] crypto: skcipher - Copy iv from desc even for 0-len walks

2016-10-12 Thread lizf
, which eventually OOPSes due to the uninitialized ->iv member. Signed-off-by: Jason A. Donenfeld Signed-off-by: Herbert Xu [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- crypto/ablkcipher.c | 2 +- crypto/blkcipher.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)

[PATCH 3.4 104/125] KEYS: Fix race between read and revoke

2016-10-12 Thread lizf
From: David Howells 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit b4a1b4f5047e4f54e194681125c74c0aa64d637d upstream. This fixes CVE-2015-7550. There's a race between keyctl_read() and keyctl_revoke(). If the revoke happens between key

[PATCH 3.4 080/125] parisc iommu: fix panic due to trying to allocate too large region

2016-10-12 Thread lizf
From: Mikulas Patocka 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit e46e31a3696ae2d66f32c207df3969613726e636 upstream. When using the Promise TX2+ SATA controller on PA-RISC, the system often crashes with kernel panic, for example just

[PATCH 3.4 078/125] vgaarb: fix signal handling in vga_get()

2016-10-12 Thread lizf
From: "Kirill A. Shutemov" 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 9f5bd30818c42c6c36a51f93b4df75a2ea2bd85e upstream. There are few defects in vga_get() related to signal hadning: - we shouldn't check for pending signals for TA

[PATCH 3.4 083/125] tty: Fix GPF in flush_to_ldisc()

2016-10-12 Thread lizf
[< (null)>] (null) RSP CR2: ---[ end trace a587f8947e54d6ea ]--- Reported-by: Dmitry Vyukov Signed-off-by: Peter Hurley Signed-off-by: Greg Kroah-Hartman [lizf: Backportd to 3.4: adjust context] Signed-off-by: Zefan Li --- drivers/tty/tty_buffer.c |

[PATCH 3.4 103/125] USB: fix invalid memory access in hub_activate()

2016-10-12 Thread lizf
uot;USB: change hub initialization sleeps to delayed_work") Signed-off-by: Greg Kroah-Hartman [lizf: Backported to 3.4: add forward declaration of hub_release()] Signed-off-by: Zefan Li --- drivers/usb/core/hub.c | 23 --- 1 file changed, 20 insertions(+), 3 deletions(-)

[PATCH 3.4 075/125] rfkill: copy the name into the rfkill struct

2016-10-12 Thread lizf
From: Johannes Berg 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit b7bb110008607a915298bf0f47d25886ecb94477 upstream. Some users of rfkill, like NFC and cfg80211, use a dynamic name when allocating rfkill, in those cases dev_name(). Ther

[PATCH 3.4 108/125] mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone()

2016-10-12 Thread lizf
From: Andrew Banman 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 5f0f2887f4de9508dcf438deab28f1de8070c271 upstream. test_pages_in_a_zone() does not account for the possibility of missing sections in the given pfn range. pfn_valid_with

[PATCH 3.4 082/125] mm: hugetlb: call huge_pte_alloc() only if ptep is null

2016-10-12 Thread lizf
t case.) Fixes: 290408d4a250 ("hugetlb: hugepage migration core") Signed-off-by: Naoya Horiguchi Acked-by: Hillf Danton Acked-by: David Rientjes Cc: Hugh Dickins Cc: Dave Hansen Cc: Mel Gorman Cc: Joonsoo Kim Cc: Mike Kravetz Signed-off-by: Andrew Morton Signed-off-by: Linus Torva

[PATCH 3.4 076/125] dm btree: fix bufio buffer leaks in dm_btree_del() error path

2016-10-12 Thread lizf
From: Joe Thornber 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit ed8b45a3679eb49069b094c0711b30833f27c734 upstream. If dm_btree_del()'s call to push_frame() fails, e.g. due to btree_node_validator finding invalid metadata, the dm_btree_

[PATCH 3.4 000/125] 3.4.113-rc1 review

2016-10-12 Thread lizf
From: Zefan Li This is the start of the stable review cycle for the 3.4.113 release. There are 125 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri Oct 14 12:32:05 UTC 201

[PATCH 3.4 091/125] ftrace/scripts: Have recordmcount copy the object file

2016-10-12 Thread lizf
From: "Steven Rostedt (Red Hat)" 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit a50bd43935586420fb75f4558369eb08566fac5e upstream. Russell King found that he had weird side effects when compiling the kernel with hard linked ccache. The r

[PATCH 3.4 117/125] ipv6: update ip6_rt_last_gc every time GC is run

2016-10-12 Thread lizf
From: Michal Kubeček 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 49a18d86f66d33a20144ecb5a34bba0d1856b260 upstream. As pointed out by Eric Dumazet, net->ipv6.ip6_rt_last_gc should hold the last time garbage collector was run so that w

[PATCH 3.4 112/125] USB: ti_usb_3410_502: Fix ID table size

2016-10-12 Thread lizf
From: Ben Hutchings 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- Commit 35a2fbc941ac ("USB: serial: ti_usb_3410_5052: new device id for Abbot strip port cable") failed to update the size of the ti_id_table_3410 array. This doesn't need to be

[PATCH 3.4 097/125] xen/pciback: Return error on XEN_PCI_OP_enable_msi when device has MSI or MSI-X enabled

2016-10-12 Thread lizf
From: Konrad Rzeszutek Wilk 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 56441f3c8e5bd45aab10dd9f8c505dd4bec03b0d upstream. The guest sequence of: a) XEN_PCI_OP_enable_msi b) XEN_PCI_OP_enable_msi c) XEN_PCI_OP_disable_msi results

[PATCH 3.4 116/125] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event

2016-10-12 Thread lizf
From: Karl Heiss 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 635682a14427d241bab7bbdeebb48a7d7b91638e upstream. A case can occur when sctp_accept() is called by the user during a heartbeat timeout event after the 4-way handshake. Sin

[PATCH 3.4 118/125] ipv6: don't call fib6_run_gc() until routing is ready

2016-10-12 Thread lizf
From: Michal Kubeček 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 2c861cc65ef4604011a0082e4dcdba2819aa191a upstream. When loading the ipv6 module, ndisc_init() is called before ip6_route_init(). As the former registers a handler callin

[PATCH 3.4 111/125] af_unix: fix a fatal race with bit fields

2016-10-12 Thread lizf
From: Eric Dumazet 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 60bc851ae59bfe99be6ee89d6bc50008c85ec75d upstream. Using bit fields is dangerous on ppc64/sparc64, as the compiler [1] uses 64bit instructions to manipulate them. If the 6

[PATCH 3.4 034/125] usb: musb: core: fix order of arguments to ulpi write callback

2016-10-12 Thread lizf
From: Uwe Kleine-König 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 705e63d2b29c8bbf091119084544d353bda70393 upstream. There is a bit of a mess in the order of arguments to the ulpi write callback. There is int ulpi_write(stru

[PATCH 3.4 096/125] xen/pciback: Save xen_pci_op commands before processing it

2016-10-12 Thread lizf
From: Konrad Rzeszutek Wilk 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 8135cf8b092723dbfcc611fe6fdcb3a36c9951c5 upstream. Double fetch vulnerabilities that happen when a variable is fetched twice from shared memory but a security che

[PATCH 3.4 058/125] sched/core: Clear the root_domain cpumasks in init_rootdomain()

2016-10-12 Thread lizf
d-off-by: Peter Zijlstra (Intel) Cc: Linus Torvalds Cc: Mike Galbraith Cc: Peter Zijlstra Cc: Steven Rostedt Cc: Thomas Gleixner Link: http://lkml.kernel.org/r/1449057179-29321-1-git-send-email-xlp...@redhat.com Signed-off-by: Ingo Molnar [lizf: there's no rd->dlo_mask, so remove the

[PATCH 3.4 123/125] Revert "USB: Add OTG PET device to TPL"

2016-10-12 Thread lizf
From: Zefan Li 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- This reverts commit 97fa724b23c3dd22e9c0979ad0e9d260cc6d545d. Conflicts: drivers/usb/core/quirks.c Signed-off-by: Zefan Li --- drivers/usb/core/otg_whitelist.h | 5 -

[PATCH 3.4 040/125] ip6mr: call del_timer_sync() in ip6mr_free_table()

2016-10-12 Thread lizf
From: WANG Cong 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 7ba0c47c34a1ea5bc7a24ca67309996cce0569b5 upstream. We need to wait for the flying timers, since we are going to free the mrtable right after it. Cc: Hannes Frederic Sowa Si

[PATCH 3.4 051/125] USB: option: add XS Stick W100-2 from 4G Systems

2016-10-12 Thread lizf
From: Bjørn Mork 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 638148e20c7f8f6e95017fdc13bce8549a6925e0 upstream. Thomas reports " 4gsystems sells two total different LTE-surfsticks under the same name. .. The newer version of XS Stick

[PATCH 3.4 120/125] Fix incomplete backport of commit 423f04d63cf4

2016-10-12 Thread lizf
From: Zefan Li 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- Signed-off-by: Zefan Li --- drivers/md/raid1.c | 3 --- 1 file changed, 3 deletions(-) diff --git a/drivers/md/raid1.c b/drivers/md/raid1.c index a548eed..a4d994f 100644 --- a/driv

[PATCH 3.4 090/125] scripts: recordmcount: break hardlinks

2016-10-12 Thread lizf
From: Russell King 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit dd39a26538e37f6c6131e829a4a510787e43c783 upstream. recordmcount edits the file in-place, which can cause problems when using ccache in hardlink mode. Arrange for recordmc

[PATCH 3.4 113/125] net: Fix skb csum races when peeking

2016-10-12 Thread lizf
From: Herbert Xu 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- [ Upstream commit 89c22d8c3b278212eef6a8cc66b570bc840a6f5a ] When we calculate the checksum on the recv path, we store the result in the skb as an optimisation in case we need the

[PATCH 3.4 055/125] vfs: Avoid softlockups with sendfile(2)

2016-10-12 Thread lizf
From: Jan Kara 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit c2489e07c0a71a56fb2c84bc0ee66cddfca7d068 upstream. The following test program from Dmitry can cause softlockups or RCU stalls as it copies 1GB from tmpfs into eventfd and we d

[PATCH 3.4 041/125] net: ip6mr: fix static mfc/dev leaks on table destruction

2016-10-12 Thread lizf
From: Nikolay Aleksandrov 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 4c6980462f32b4f282c5d8e5f7ea8070e2937725 upstream. Similar to ipv4, when destroying an mrt table the static mfc entries and the static devices are kept, which leads

[PATCH 3.4 036/125] mac80211: mesh: fix call_rcu() usage

2016-10-12 Thread lizf
From: Johannes Berg 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit c2e703a55245bfff3db53b1f7cbe59f1ee8a4339 upstream. When using call_rcu(), the called function may be delayed quite significantly, and without a matching rcu_barrier() the

[PATCH 3.4 092/125] xen: Add RING_COPY_REQUEST()

2016-10-12 Thread lizf
From: David Vrabel 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 454d5d882c7e412b840e3c99010fe81a9862f6fb upstream. Using RING_GET_REQUEST() on a shared ring is easy to use incorrectly (i.e., by not considering that the other end may al

[PATCH 3.4 057/125] wan/x25: Fix use-after-free in x25_asy_open_tty()

2016-10-12 Thread lizf
From: Peter Hurley 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit ee9159ddce14bc1dec9435ae4e3bd3153e783706 upstream. The N_X25 line discipline may access the previous line discipline's closed and already-freed private data on open [1].

[PATCH 3.4 062/125] USB: cp210x: Remove CP2110 ID from compatibility list

2016-10-12 Thread lizf
From: Konstantin Shkolnyy 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 7c90e610b60cd1ed6abafd806acfaedccbbe52d1 upstream. CP2110 ID (0x10c4, 0xea80) doesn't belong here because it's a HID and completely different from CP210x devices.

[PATCH 3.4 094/125] xen-netback: use RING_COPY_REQUEST() throughout

2016-10-12 Thread lizf
[lizf: Backported to 3.4: - adjust context - s/queue/vif/g] Signed-off-by: Zefan Li --- drivers/net/xen-netback/netback.c | 30 ++ 1 file changed, 14 insertions(+), 16 deletions(-) diff --git a/drivers/net/xen-netback/netback.c b/drivers/net/xen-netback/netback.c

[PATCH 3.4 060/125] fix sysvfs symlinks

2016-10-12 Thread lizf
of testing sysvfs gets ;-/ Signed-off-by: Al Viro [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- fs/sysv/inode.c | 10 ++ 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/fs/sysv/inode.c b/fs/sysv/inode.c index 3da5ce2..fcdd63c 100644 --- a/fs/sysv

[PATCH 3.4 063/125] ext4: Fix handling of extended tv_sec

2016-10-12 Thread lizf
From: David Turner 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit a4dad1ae24f850410c4e60f22823cba1289b8d52 upstream. In ext4, the bottom two bits of {a,c,m}time_extra are used to extend the {a,c,m}time fields, deferring the year 2038 pro

[PATCH 3.4 028/125] x86/cpu: Call verify_cpu() after having entered long mode too

2016-10-12 Thread lizf
el.org/r/1446739076-21303-1-git-send-email...@alien8.de Signed-off-by: Thomas Gleixner [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- arch/x86/kernel/head_64.S| 8 arch/x86/kernel/verify_cpu.S | 12 +++- 2 files changed, 15 insertions(+), 5 deletions(

[PATCH 3.4 095/125] xen-blkback: only read request operation from shared ring once

2016-10-12 Thread lizf
with the frontend. When converting a non-native request to a native one, ensure that src->operation is only loaded once by using READ_ONCE(). This is part of XSA155. Signed-off-by: Roger Pau Monné Signed-off-by: David Vrabel Signed-off-by: Konrad Rzeszutek Wilk [lizf: Backported to

[PATCH 3.4 061/125] fuse: break infinite loop in fuse_fill_write_pages()

2016-10-12 Thread lizf
From: Roman Gushchin 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 3ca8138f014a913f98e6ef40e939868e1e9ea876 upstream. I got a report about unkillable task eating CPU. Further investigation shows, that the problem is in the fuse_fill_wri

[PATCH 3.4 045/125] iio: lpc32xx_adc: fix warnings caused by enabling unprepared clock

2016-10-12 Thread lizf
From: Vladimir Zapolskiy 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 01bb70ae0b98d266fa3e860482c7ce22fa482a6e upstream. If common clock framework is configured, the driver generates a warning, which is fixed by this change: root@

[PATCH 3.4 093/125] xen-netback: don't use last request to determine minimum Tx credit

2016-10-12 Thread lizf
need to send a packet since the last packet might have been a small one. Instead allow for the worst case 128 KiB packet. This is part of XSA155. Reviewed-by: Wei Liu Signed-off-by: David Vrabel Signed-off-by: Konrad Rzeszutek Wilk [lizf: Backported to 3.4: s/queue/vif/g] Signed-off-by: Zefan Li

[PATCH 3.4 059/125] x86/signal: Fix restart_syscall number for x32 tasks

2016-10-12 Thread lizf
From: "Dmitry V. Levin" 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 22eab1108781eff09961ae7001704f7bd8fb1dce upstream. When restarting a syscall with regs->ax == -ERESTART_RESTARTBLOCK, regs->ax is assigned to a restart_syscall number

[PATCH 3.4 043/125] ring-buffer: Update read stamp with first real commit on page

2016-10-12 Thread lizf
From: "Steven Rostedt (Red Hat)" 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit b81f472a208d3e2b4392faa6d17037a89442f4ce upstream. Do not update the read stamp after swapping out the reader page from the write buffer. If the reader page

[PATCH 3.4 039/125] usblp: do not set TASK_INTERRUPTIBLE before lock

2016-10-12 Thread lizf
From: Jiri Slaby 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 19cd80a214821f4b558560ebd76bfb2c38b4f3d8 upstream. It is not permitted to set task state before lock. usblp_wwait sets the state to TASK_INTERRUPTIBLE and calls mutex_lock_i

[PATCH 3.4 046/125] ALSA: usb-audio: add packet size quirk for the Medeli DD305

2016-10-12 Thread lizf
From: Clemens Ladisch 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 98d362becb6621bebdda7ed0eac7ad7ec6c37898 upstream. Signed-off-by: Clemens Ladisch Signed-off-by: Takashi Iwai Signed-off-by: Zefan Li --- sound/usb/midi.c | 1 + 1

[PATCH 3.4 031/125] scsi_sysfs: Fix queue_ramp_up_period return code

2016-10-12 Thread lizf
From: Peter Oberparleiter 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 863e02d0e173bb9d8cea6861be22820b25c076cc upstream. Writing a number to /sys/bus/scsi/devices//queue_ramp_up_period returns the value of that number instead of the n

[PATCH 3.4 035/125] net: fix __netdev_update_features return on ndo_set_features failure

2016-10-12 Thread lizf
From: Nikolay Aleksandrov 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 00ee5927177792a6e139d50b6b7564d35705556a upstream. If ndo_set_features fails __netdev_update_features() will return -1 but this is wrong because it is expected to r

[PATCH 3.4 049/125] USB: serial: option: add support for Novatel MiFi USB620L

2016-10-12 Thread lizf
From: Aleksander Morgado 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit e07af133c3e2716db25e3e1e1d9f10c2088e9c1a upstream. Also known as Verizon U620L. The device is modeswitched from 1410:9020 to 1410:9022 by selecting the 4th USB conf

[PATCH 3.4 053/125] can: sja1000: clear interrupts on start

2016-10-12 Thread lizf
arc Kleine-Budde [lizf: Backported to 3.4: s/SJA1000_IR/REG_IR/] Signed-off-by: Zefan Li --- drivers/net/can/sja1000/sja1000.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/net/can/sja1000/sja1000.c b/drivers/net/can/sja1000/sja1000.c index 2d3ad72..1824486 100644 --- a/drivers/net/

[PATCH 3.4 066/125] AHCI: Fix softreset failed issue of Port Multiplier

2016-10-12 Thread lizf
From: Xiangliang Yu 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 023113d24ef9e1d2b44cb2446872b17e2b01d8b1 upstream. Current code doesn't update port value of Port Multiplier(PM) when sending FIS of softreset to device, command will fai

[PATCH 3.4 054/125] vfs: Make sendfile(2) killable even better

2016-10-12 Thread lizf
From: Jan Kara 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit c725bfce7968009756ed2836a8cd7ba4dc163011 upstream. Commit 296291cdd162 (mm: make sendfile(2) killable) fixed an issue where sendfile(2) was doing a lot of tiny writes into a f

[PATCH 3.4 050/125] ASoC: wm8962: correct addresses for HPF_C_0/1

2016-10-12 Thread lizf
From: Sachin Pandhare 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit e9f96bc53c1b959859599cb30ce6fd4fbb4448c2 upstream. >From datasheet: R17408 (4400h) HPF_C_1 R17409 (4401h) HPF_C_0 17048 -> 17408 (0x4400) 17049 -> 17409 (0x4401) Signe

[PATCH 3.4 026/125] ALSA: hda - Apply pin fixup for HP ProBook 6550b

2016-10-12 Thread lizf
From: Takashi Iwai 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit c932b98c1e47312822d911c1bb76e81ef50e389c upstream. HP ProBook 6550b needs the same pin fixup applied to other HP B-series laptops with docks for making its headphone and d

[PATCH 3.4 056/125] nfs: if we have no valid attrs, then don't declare the attribute cache valid

2016-10-12 Thread lizf
From: Jeff Layton 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit c812012f9ca7cf89c9e1a1cd512e6c3b5be04b85 upstream. If we pass in an empty nfs_fattr struct to nfs_update_inode, it will (correctly) not update any of the attributes, but it

[PATCH 3.4 032/125] binfmt_elf: Don't clobber passed executable's file header

2016-10-12 Thread lizf
From: "Maciej W. Rozycki" 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit b582ef5c53040c5feef4c96a8f9585b6831e2441 upstream. Do not clobber the buffer space passed from `search_binary_handler' and originally preloaded by `prepare_binprm'

[PATCH 3.4 042/125] broadcom: fix PHY_ID_BCM5481 entry in the id table

2016-10-12 Thread lizf
From: Aaro Koskinen 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 3c25a860d17b7378822f35d8c9141db9507e3beb upstream. Commit fcb26ec5b18d ("broadcom: move all PHY_ID's to header") updated broadcom_tbl to use PHY_IDs, but incorrectly repl

[PATCH 3.4 122/125] Revert "USB: Add device quirk for ASUS T100 Base Station keyboard"

2016-10-12 Thread lizf
From: Zefan Li 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- This reverts commit eea5a87d270e8d6925063019c3b0f3ff61fcb49a. Conflicts: drivers/usb/core/quirks.c include/linux/usb/quirks.h Signed-off-by: Zefan Li --- drivers/u

[PATCH 3.4 033/125] sctp: translate host order to network order when setting a hmacid

2016-10-12 Thread lizf
From: lucien 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit ed5a377d87dc4c87fb3e1f7f698cba38cd893103 upstream. now sctp auth cannot work well when setting a hmacid manually, which is caused by that we didn't use the network order for hma

[PATCH 3.4 064/125] jbd2: Fix unreclaimed pages after truncate in data=journal mode

2016-10-12 Thread lizf
From: Jan Kara 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit bc23f0c8d7ccd8d924c4e70ce311288cb3e61ea8 upstream. Ted and Namjae have reported that truncated pages don't get timely reclaimed after being truncated in data=journal mode. The

[PATCH 3.4 052/125] mac: validate mac_partition is within sector

2016-10-12 Thread lizf
From: Kees Cook 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 02e2a5bfebe99edcf9d694575a75032d53fe1b73 upstream. If md->signature == MAC_DRIVER_MAGIC and md->block_size == 1023, a single 512 byte sector would be read (secsize / 512). Ho

[PATCH 3.4 114/125] udp: properly support MSG_PEEK with truncated buffers

2016-10-12 Thread lizf
d-by: Herbert Xu Signed-off-by: David S. Miller [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- net/ipv4/udp.c | 6 -- net/ipv6/udp.c | 6 -- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/net/ipv4/udp.c b/net/ipv4/udp.c index 5f8c20b..8629205 100644 ---

[PATCH 3.4 048/125] ALSA: usb-audio: work around CH345 input SysEx corruption

2016-10-12 Thread lizf
From: Clemens Ladisch 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit a91e627e3f0ed820b11d86cdc04df38f65f33a70 upstream. One of the many faults of the QinHeng CH345 USB MIDI interface chip is that it does not handle received SysEx message

[PATCH 3.4 027/125] firewire: ohci: fix JMicron JMB38x IT context discovery

2016-10-12 Thread lizf
eported correctly, even though it is probed right before IsoXmitIntMask. Reported-by: Clifford Dunn Reported-by: Craig Moore Signed-off-by: Stefan Richter [lizf: Backported to 3.4: use dev_notice() instead of ohci_notice()] Signed-off-by: Zefan Li --- drivers/firewire/ohci.c | 5 + 1 file

[PATCH 3.4 044/125] net/neighbour: fix crash at dumping device-agnostic proxy entries

2016-10-12 Thread lizf
: 84920c1420e2 ("net: Allow ipv6 proxies and arp proxies be shown with iproute2") Signed-off-by: David S. Miller [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- net/core/neighbour.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/net/core/neighbour.c

[PATCH 3.4 038/125] tcp: md5: fix lockdep annotation

2016-10-12 Thread lizf
From: Eric Dumazet 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 1b8e6a01e19f001e9f93b39c32387961c91ed3cc upstream. When a passive TCP is created, we eventually call tcp_md5_do_add() with sk pointing to the child. It is not owner by the

[PATCH 3.4 125/125] time: Prevent early expiry of hrtimers[CLOCK_REALTIME] at the leap second edge

2016-10-12 Thread lizf
From: John Stultz 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 833f32d763028c1bb371c64f457788b933773b3e upstream. Currently, leapsecond adjustments are done at tick time. As a result, the leapsecond was applied at the first timer tick

[PATCH 3.4 124/125] tcp: make challenge acks less predictable

2016-10-12 Thread lizf
f-by: Eric Dumazet Suggested-by: Linus Torvalds Cc: Yuchung Cheng Cc: Neal Cardwell Acked-by: Neal Cardwell Acked-by: Yuchung Cheng Signed-off-by: David S. Miller [lizf: Backported to 3.4: - adjust context - use ACCESS_ONCE instead WRITE_ONCE/READ_ONCE - open-code prandom_u32_max()] Sig

[PATCH 3.4 029/125] Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow

2016-10-12 Thread lizf
From: Filipe Manana 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 1d512cb77bdbda80f0dd0620a3b260d697fd581d upstream. If we are using the NO_HOLES feature, we have a tiny time window when running delalloc for a nodatacow inode where we c

[PATCH 3.4 065/125] drm/ttm: Fixed a read/write lock imbalance

2016-10-12 Thread lizf
From: Thomas Hellstrom 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 025af189fb44250206dd8a32fa4a682392af3301 upstream. In ttm_write_lock(), the uninterruptible path should call __ttm_write_lock() not __ttm_read_lock(). This fixes a vm

[PATCH 3.4 030/125] perf: Fix inherited events vs. tracepoint filters

2016-10-12 Thread lizf
From: Peter Zijlstra 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit b71b437eedaed985062492565d9d421d975ae845 upstream. Arnaldo reported that tracepoint filters seem to misbehave (ie. not apply) on inherited events. The fix is obvious; f

[PATCH 3.4 119/125] ipv6: fix handling of blackhole and prohibit routes

2016-10-12 Thread lizf
From: Nicolas Dichtel 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit ef2c7d7b59708d54213c7556a82d14de9a7e4475 upstream. When adding a blackhole or a prohibit route, they were handling like classic routes. Moreover, it was only possible t

[PATCH 3.4 047/125] ALSA: usb-audio: prevent CH345 multiport output SysEx corruption

2016-10-12 Thread lizf
From: Clemens Ladisch 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 1ca8b201309d842642f221db7f02f71c0af5be2d upstream. The CH345 USB MIDI chip has two output ports. However, they are multiplexed through one pin, and the number of ports

[PATCH 3.4 037/125] macvlan: fix leak in macvlan_handle_frame

2016-10-12 Thread lizf
From: Sabrina Dubroca 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit e639b8d8a7a728f0b05ef2df6cb6b45dc3d4e556 upstream. Reset pskb in macvlan_handle_frame in case skb_share_check returned a clone. Fixes: 8a4eb5734e8d ("net: introduce rx

[PATCH 3.4 121/125] Fix incomplete backport of commit 0f792cf949a0

2016-10-12 Thread lizf
From: Zefan Li 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- Signed-off-by: Zefan Li --- mm/hugetlb.c | 14 +- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/mm/hugetlb.c b/mm/hugetlb.c index 416cbfd..6726bfe 100644

[PATCH 3.4 115/125] drm/radeon: fix hotplug race at startup

2016-10-12 Thread lizf
From: Dave Airlie 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 7f98ca454ad373fc1b76be804fa7138ff68c1d27 upstream. We apparantly get a hotplug irq before we've initialised modesetting, [drm] Loading R100 Microcode BUG: unable to handle

[PATCH 3.4 087/125] mISDN: fix a loop count

2016-10-12 Thread lizf
From: Dan Carpenter 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 40d24c4d8a7430aa4dfd7a665fa3faf3b05b673f upstream. There are two issue here. 1) cnt starts as maxloop + 1 so all these loops iterate one more time than intended. 2)

[PATCH 3.4 088/125] ser_gigaset: fix deallocation of platform device structure

2016-10-12 Thread lizf
From: Tilman Schmidt 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 4c5e354a974214dfb44cd23fa0429327693bc3ea upstream. When shutting down the device, the struct ser_cardstate must not be kfree()d immediately after the call to platform_de

[PATCH 3.4 102/125] USB: ipaq.c: fix a timeout loop

2016-10-12 Thread lizf
From: Dan Carpenter 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit abdc9a3b4bac97add99e1d77dc6d28623afe682b upstream. The code expects the loop to end with "retries" set to zero but, because it is a post-op, it will end set to -1. I hav

[PATCH 3.4 098/125] xen/pciback: Return error on XEN_PCI_OP_enable_msix when device has MSI or MSI-X enabled

2016-10-12 Thread lizf
From: Konrad Rzeszutek Wilk 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 5e0ce1455c09dd61d029b8ad45d82e1ac0b6c4c9 upstream. The guest sequence of: a) XEN_PCI_OP_enable_msix b) XEN_PCI_OP_enable_msix results in hitting an NULL poi

[PATCH 3.4 084/125] genirq: Prevent chip buslock deadlock

2016-10-12 Thread lizf
From: Thomas Gleixner 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit abc7e40c81d113ef4bacb556f0a77ca63ac81d85 upstream. If a interrupt chip utilizes chip->buslock then free_irq() can deadlock in the following way: CPU0

[PATCH 3.4 101/125] xen/pciback: Don't allow MSI-X ops if PCI_COMMAND_MEMORY is not set.

2016-10-12 Thread lizf
From: Konrad Rzeszutek Wilk 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 408fb0e5aa7fda0059db282ff58c3b2a4278baa0 upstream. commit f598282f51 ("PCI: Fix the NIU MSI-X problem in a better way") teaches us that dealing with MSI-X can be

[PATCH 3.4 086/125] ARM: 8471/1: need to save/restore arm register(r11) when it is corrupted

2016-10-12 Thread lizf
those corrupted registers is a must in assemble code. Signed-off-by: Anson Huang Reviewed-by: Nicolas Pitre Signed-off-by: Russell King [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li --- arch/arm/mm/proc-v7.S | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff

[PATCH 3.4 100/125] xen/pciback: For XEN_PCI_OP_disable_msi[|x] only disable if device has MSI(X) enabled.

2016-10-12 Thread lizf
From: Konrad Rzeszutek Wilk 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 7cfb905b9638982862f0331b36ccaaca5d383b49 upstream. Otherwise just continue on, returning the same values as previously (return of 0, and op->result has the PIRQ v

[PATCH 3.4 089/125] spi: fix parent-device reference leak

2016-10-12 Thread lizf
From: Johan Hovold 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 157f38f993919b648187ba341bfb05d0e91ad2f6 upstream. Fix parent-device reference leak due to SPI-core taking an unnecessary reference to the parent when allocating the maste

[PATCH 3.4 072/125] sctp: start t5 timer only when peer rwnd is 0 and local state is SHUTDOWN_PENDING

2016-10-12 Thread lizf
From: lucien 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 8a0d19c5ed417c78d03f4e0fa7215e58c40896d8 upstream. when A sends a data to B, then A close() and enter into SHUTDOWN_PENDING state, if B neither claim his rwnd is 0 nor send SACK

[PATCH 3.4 071/125] ALSA: rme96: Fix unexpected volume reset after rate changes

2016-10-12 Thread lizf
From: Takashi Iwai 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit a74a821624c0c75388a193337babd17a8c02c740 upstream. rme96 driver needs to reset DAC depending on the sample rate, and this results in resetting to the max volume suddenly.

[PATCH 3.4 085/125] sh_eth: fix TX buffer byte-swapping

2016-10-12 Thread lizf
From: Sergei Shtylyov 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit 3e2309937f1e5d538ff13da5fb8de41196927c61 upstream. For the little-endian SH771x kernels the driver has to byte-swap the RX/TX buffers, however yet unset physcial addre

[PATCH 3.4 067/125] sata_sil: disable trim

2016-10-12 Thread lizf
From: Mikulas Patocka 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit d98f1cd0a3b70ea91f1dfda3ac36c3b2e1a4d5e2 upstream. When I connect an Intel SSD to SATA SIL controller (PCI ID 1095:3114), any TRIM command results in I/O errors being r

[PATCH 3.4 006/125] MIPS: atomic: Fix comment describing atomic64_add_unless's return value.

2016-10-12 Thread lizf
From: Ralf Baechle 3.4.113-rc1 review patch. If anyone has any objections, please let me know. -- commit f25319d2cb439249a6859f53ad42ffa332b0acba upstream. Signed-off-by: Ralf Baechle Fixes: f24219b4e90cf70ec4a211b17fbabc725a0ddf3c (cherry picked from commit f0a232cde7be18a2

  1   2   3   4   5   6   7   8   9   10   >