linux 4.9.0-16.17 source package in Ubuntu

Changelog

linux (4.9.0-16.17) zesty; urgency=low

  [ Tim Gardner ]

  * Release Tracking Bug
    - LP: #1660738

  * Zesty update to v4.9.6 stable release (LP: #1660732)
    - IB/core: Release allocated memory in cache setup failure
    - IB/rxe: Increase max number of completions to 32k
    - IB/rxe: avoid putting a large struct rxe_qp on stack
    - IB/mlx5: Avoid system crash when enabling many VFs
    - IB/mlx5: Fix reported max SGE calculation
    - IB/mlx5: Assign SRQ type earlier
    - IB/mlx5: Wait for all async command completions to complete
    - IB/mlx4: Set traffic class in AH
    - IB/mlx4: Fix out-of-range array index in destroy qp flow
    - IB/mlx4: Handle well-known-gid in mad_demux processing
    - IB/mlx4: Fix port query for 56Gb Ethernet links
    - IB/mlx4: When no DMFS for IPoIB, don't allow NET_IF QPs
    - IB/mlx4: Check if GRH is available before using it
    - IB/IPoIB: Remove can't use GFP_NOIO warning
    - perf trace: Use the syscall raw_syscalls:sys_enter timestamp
    - perf mem: Fix --all-user/--all-kernel options
    - perf trace: Check if MAP_32BIT is defined (again)
    - perf diff: Do not overwrite valid build id
    - perf callchain: Fixup help/config for no-unwinding
    - perf scripting: Avoid leaking the scripting_context variable
    - perf jit: Enable jitdump support without dwarf
    - ARM: dts: bcm283x: fix typo in mailbox address
    - ARM: dts: r8a7794: Use SYSC "always-on" PM Domain for sound
    - ARM: dts: r8a7794: remove Z clock
    - ARM: dts: imx6q-cm-fx6: fix fec pinctrl
    - ARM: dts: imx31: fix clock control module interrupts description
    - ARM: dts: imx31: move CCM device node to AIPS2 bus devices
    - ARM: dts: imx31: fix AVIC base address
    - ARM: dts: omap3: Add DTS for Logic PD SOM-LV 37xx Dev Kit
    - tmpfs: clear S_ISGID when setting posix ACLs
    - x86/PCI: Ignore _CRS on Supermicro X8DTH-i/6/iF/6F
    - rcu: Remove cond_resched() from Tiny synchronize_sched()
    - rcu: Narrow early boot window of illegal synchronous grace periods
    - sunrpc: don't call sleeping functions from the notifier block callbacks
    - svcrpc: don't leak contexts on PROC_DESTROY
    - libnvdimm, namespace: fix pmem namespace leak, delete when size set to zero
    - ARC: module: Fix !CONFIG_ARC_DW2_UNWIND builds
    - fuse: clear FR_PENDING flag when moving requests out of pending queue
    - fuse: fix time_to_jiffies nsec sanity check
    - PCI: designware: Check for iATU unroll only on platforms that use ATU
    - PCI: Enumerate switches below PCI-to-PCIe bridges
    - HID: corsair: fix DMA buffers on stack
    - HID: corsair: fix control-transfer error handling
    - mmc: sdhci-acpi: Only powered up enabled acpi child devices
    - mmc: mxs-mmc: Fix additional cycles after transmission stop
    - ieee802154: atusb: do not use the stack for buffers to make them DMA able
    - mtd: nand: lpc32xx: fix invalid error handling of a requested irq
    - mtd: nand: xway: disable module support
    - mtd: nand: xway: fix build because of module functions
    - KVM: s390: do not expose random data via facility bitmap
    - KVM: arm/arm64: vgic: Fix deadlock on error handling
    - powerpc/icp-opal: Fix missing KVM case and harden replay
    - powerpc/perf: Fix PM_BRU_CMPL event code for power9
    - powerpc/ptrace: Preserve previous fprs/vsrs on short regset write
    - powerpc/ptrace: Preserve previous TM fprs/vsrs on short regset write
    - powerpc: Ignore reserved field in DCSR and PVR reads and writes
    - x86/ioapic: Restore IO-APIC irq_chip retrigger callback
    - qla2xxx: Fix crash due to null pointer access
    - mac80211: implement multicast forwarding on fast-RX path
    - ubifs: Fix journal replay wrt. xattr nodes
    - clocksource/exynos_mct: Clear interrupt when cpu is shut down
    - svcrdma: avoid duplicate dma unmapping during error recovery
    - ARM: 8634/1: hw_breakpoint: blacklist Scorpion CPUs
    - ceph: fix bad endianness handling in parse_reply_info_extra
    - ARM: dts: OMAP5 / DRA7: indicate that SATA port 0 is available.
    - ARM: dts: da850-evm: fix read access to SPI flash
    - arm64: avoid returning from bad_mode
    - arm64/ptrace: Preserve previous registers for short regset write
    - arm64/ptrace: Preserve previous registers for short regset write - 2
    - arm64/ptrace: Preserve previous registers for short regset write - 3
    - arm64/ptrace: Avoid uninitialised struct padding in fpr_set()
    - arm64/ptrace: Reject attempts to set incomplete hardware breakpoint fields
    - Input: ALPS - fix TrackStick support for SS5 hardware
    - libceph: ceph_x_encrypt_buflen() takes in_len
    - libceph: old_key in process_one_ticket() is redundant
    - libceph: introduce ceph_x_encrypt_offset()
    - libceph: introduce ceph_crypt() for in-place en/decryption
    - libceph: rename and align ceph_x_authorizer::reply_buf
    - libceph: tweak calcu_signature() a little
    - libceph: switch ceph_x_encrypt() to ceph_crypt()
    - libceph: switch ceph_x_decrypt() to ceph_crypt()
    - libceph: remove now unused ceph_*{en,de}crypt*() functions
    - ARM: dts: dra7: Add an empty chosen node to top level DTSI
    - ARM: dts: dm816x: Add an empty chosen node to top level DTSI
    - ARM: dts: dm814x: Add an empty chosen node to top level DTSI
    - ARM: dts: am33xx: Add an empty chosen node to top level DTSI
    - ARM: dts: omap4: Add an empty chosen node to top level DTSI
    - ARM: dts: omap5: Add an empty chosen node to top level DTSI
    - ARM: dts: am4372: Add an empty chosen node to top level DTSI
    - ARM: dts: omap3: Add an empty chosen node to top level DTSI
    - ARM: dts: omap2: Add an empty chosen node to top level DTSI
    - ARM: dts: imx6qdl-nitrogen6_max: fix sgtl5000 pinctrl init
    - ARM: dts: omap3: Fix Card Detect and Write Protect on Logic PD SOM-LV
    - ARM: ux500: fix prcmu_is_cpu_in_wfi() calculation
    - ARM: 8613/1: Fix the uaccess crash on PB11MPCore
    - ceph: fix scheduler warning due to nested blocking
    - ceph: fix ceph_get_caps() interruption
    - ceph: fix endianness of getattr mask in ceph_d_revalidate
    - ceph: fix endianness bug in frag_tree_split_cmp
    - libceph: make sure ceph_aes_crypt() IV is aligned
    - xprtrdma: Make FRWR send queue entry accounting more accurate
    - xprtrdma: Squelch "max send, max recv" messages at connect time
    - arm64: mm: avoid name clash in __page_to_voff()
    - arm64: Fix swiotlb fallback allocation
    - swiotlb: Convert swiotlb_force from int to enum
    - swiotlb: Add swiotlb=noforce debug option
    - scsi: ses: Fix SAS device detection in enclosure
    - scsi: mpt3sas: fix hang on ata passthrough commands
    - PM / devfreq: exynos-bus: Fix the wrong return value
    - PM / devfreq: Fix the bug of devfreq_add_device when governor is NULL
    - mtd: spi-nor: Off by one in cqspi_setup_flash()
    - mtd: spi-nor: Fix some error codes in cqspi_setup_flash()
    - rpmsg: virtio_rpmsg_bus: fix channel creation
    - blackfin: check devm_pinctrl_get() for errors
    - platform: pxa_camera: add VIDEO_V4L2 dependency
    - gs1662: drop kfree for memory allocated with devm_kzalloc
    - ite-cir: initialize use_demodulator before using it
    - st-hva: fix some error handling in hva_hw_probe()
    - s5p-cec: mark PM functions as __maybe_unused again
    - s5p-mfc: Fix clock management in s5p_mfc_release() function
    - dmaengine: rcar-dmac: unmap slave resource when channel is freed
    - dmaengine: pl330: Fix runtime PM support for terminated transfers
    - spi: pxa2xx: add missed break
    - soc: ti: wkup_m3_ipc: Fix error return code in wkup_m3_ipc_probe()
    - selftest/powerpc: Wrong PMC initialized in pmc56_overflow test
    - tools/virtio/ringtest: fix run-on-all.sh for offline cpus
    - libceph: uninline ceph_crypto_key_destroy()
    - libceph: stop allocating a new cipher on every crypto request
    - Linux 4.9.6

  * Miscellaneous Ubuntu changes
    - d-i: initrd needs msm_emac on amberwing platform.

linux (4.9.0-15.16) zesty; urgency=low

  [ Tim Gardner ]

  * Release Tracking Bug
    - LP: #1658101

  * Zesty update to v4.9.5 stable release (LP: #1658099)
    - Input: xpad - use correct product id for x360w controllers
    - Input: i8042 - add Pegatron touchpad to noloop table
    - pinctrl: imx: fix imx_pinctrl_desc initialization
    - pinctrl: sh-pfc: r8a7795: Use lookup function for bias data
    - pinctrl: sh-pfc: Add helper to handle bias lookup table
    - regulator: tps65086: Fix 25mV ranges for BUCK regulators
    - regulator: axp20x: Fix axp809 ldo_io registration error on cold boot
    - drm/tegra: dpaux: Fix error handling
    - drm/vc4: Fix a couple error codes in vc4_cl_lookup_bos()
    - drm/savage: dereferencing an error pointer
    - selftests: do not require bash to run netsocktests testcase
    - selftests: do not require bash for the generated test
    - zram: revalidate disk under init_lock
    - zram: support BDI_CAP_STABLE_WRITES
    - dax: fix deadlock with DAX 4k holes
    - mm: pmd dirty emulation in page fault handler
    - mm: fix devm_memremap_pages crash, use mem_hotplug_{begin, done}
    - ocfs2: fix crash caused by stale lvb with fsdlm plugin
    - mm, memcg: fix the active list aging for lowmem requests when memcg is enabled
    - mm: support anonymous stable page
    - mm/slab.c: fix SLAB freelist randomization duplicate entries
    - mm/hugetlb.c: fix reservation race when freeing surplus pages
    - KVM: x86: fix emulation of "MOV SS, null selector"
    - KVM: eventfd: fix NULL deref irqbypass consumer
    - jump_labels: API for flushing deferred jump label updates
    - KVM: x86: flush pending lapic jump label updates on module unload
    - KVM: x86: fix NULL deref in vcpu_scan_ioapic
    - KVM: x86: add Align16 instruction flag
    - KVM: x86: add asm_safe wrapper
    - KVM: x86: emulate FXSAVE and FXRSTOR
    - KVM: x86: Introduce segmented_write_std
    - efi/libstub/arm*: Pass latest memory map to the kernel
    - efi/x86: Prune invalid memory map entries and fix boot regression
    - x86/efi: Don't allocate memmap through memblock after mm_init()
    - nl80211: fix sched scan netlink socket owner destruction
    - gpio: Move freeing of GPIO hogs before numbing of the device
    - xfs: Timely free truncated dirty pages
    - bridge: netfilter: Fix dropping packets that moving through bridge interface
    - x86/cpu/AMD: Clean up cpu_llc_id assignment per topology feature
    - x86/bugs: Separate AMD E400 erratum and C1E bug
    - x86/CPU/AMD: Fix Bulldozer topology
    - wusbcore: Fix one more crypto-on-the-stack bug
    - usb: musb: fix runtime PM in debugfs
    - USB: serial: kl5kusb105: fix line-state error handling
    - USB: serial: ch341: fix initial modem-control state
    - USB: serial: ch341: fix resume after reset
    - USB: serial: ch341: fix open error handling
    - USB: serial: ch341: fix control-message error handling
    - USB: serial: ch341: fix open and resume after B0
    - Input: elants_i2c - avoid divide by 0 errors on bad touchscreen data
    - i2c: print correct device invalid address
    - i2c: fix kernel memory disclosure in dev interface
    - fix a fencepost error in pipe_advance()
    - xhci: fix deadlock at host remove by running watchdog correctly
    - btrfs: fix crash when tracepoint arguments are freed by wq callbacks
    - ASoC: hdmi-codec: use unsigned type to structure members with bit-field
    - Revert "tty: serial: 8250: add CON_CONSDEV to flags"
    - vme: Fix wrong pointer utilization in ca91cx42_slave_get
    - pid: fix lockdep deadlock warning due to ucount_lock
    - mnt: Protect the mountpoint hashtable with mount_lock
    - drivers: char: mem: Fix thinkos in kmem address checks
    - dmaengine: omap-dma: Fix dynamic lch_map allocation
    - virtio_blk: avoid DMA to stack for the sense buffer
    - tty/serial: atmel: RS485 half duplex w/DMA: enable RX after TX is done
    - tty/serial: atmel_serial: BUG: stop DMA from transmitting in stop_tx
    - orinoco: Use shash instead of ahash for MIC calculations
    - sysrq: attach sysrq handler correctly for 32-bit kernel
    - extcon: return error code on failure
    - Clearing FIFOs in RS485 emulation mode causes subsequent transmits to break
    - sysctl: Drop reference added by grab_header in proc_sys_readdir
    - net/af_iucv: don't use paged skbs for TX on HiperSockets
    - drm/i915/gen9: Fix PCODE polling timeout in stable backport
    - drm: Clean up planes in atomic commit helper failure path
    - drm/radeon: update smc firmware selection for SI
    - drm/radeon: drop verde dpm quirks
    - drm/amdgpu: update si kicker smc firmware
    - drm/amdgpu: drop verde dpm quirks
    - USB: serial: ch341: fix modem-control and B0 handling
    - net/mlx5: Only cancel recovery work when cleaning up device
    - i2c: piix4: Avoid race conditions with IMC
    - x86/cpu: Fix bootup crashes by sanitizing the argument of the 'clearcpuid=' command-line option
    - nvme: apply DELAY_BEFORE_CHK_RDY quirk at probe time too
    - btrfs: fix locking when we put back a delayed ref that's too new
    - btrfs: fix error handling when run_delayed_extent_op fails
    - pinctrl: meson: fix gpio request disabling other modes
    - NFS: fix typo in parameter description
    - pNFS: Fix race in pnfs_wait_on_layoutreturn
    - NFS: Fix a performance regression in readdir
    - NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success.
    - i2c: mux: pca954x: fix i2c mux selection caching
    - drm/i915/gen9: Fix PCODE polling during SAGV disabling
    - drm: avoid uninitialized timestamp use in wait_vblank
    - drm/panel: simple: Check against num_timings when setting preferred for timing
    - drm/i915: Move the min_pixclk[] handling to the end of readout
    - drm: Initialise drm_mm.head_node.allocated
    - remoteproc: qcom_wcnss: Fix circular module dependency
    - remoteproc: st: Fix error return code in st_rproc_probe()
    - powerpc/64: Simplify adaptation to new ISA v3.00 HPTE format
    - cpufreq: powernv: Disable preemption while checking CPU throttling state
    - regulators: helpers: Fix handling of bypass_val_on in get_bypass_regmap
    - ACPI / CPPC: set an error code on probe error path
    - block: Change extern inline to static inline
    - block: cfq_cpd_alloc() should use @gfp
    - ACPI / APEI: Fix NMI notification handling
    - powercap/intel_rapl: fix and tidy up error handling
    - iw_cxgb4: Fix error return code in c4iw_rdev_open()
    - bq24190_charger: Fix PM runtime use for bq24190_battery_set_property
    - power: supply: bq27xxx_battery: Fix register map for BQ27510 and BQ27520
    - blk-mq: Always schedule hctx->next_cpu
    - bus: vexpress-config: fix device reference leak
    - powerpc/mm: Correct process and partition table max size
    - powerpc/ibmebus: Fix further device reference leaks
    - powerpc/ibmebus: Fix device reference leaks in sysfs interface
    - powerpc/powernv: Don't warn on PE init if unfreeze is unsupported
    - arm64: hugetlb: fix the wrong address for several functions
    - arm64: hugetlb: remove the wrong pmd check in find_num_contig()
    - arm64: hugetlb: fix the wrong return value for huge_ptep_set_access_flags
    - pinctrl: sh-pfc: Do not unconditionally support PIN_CONFIG_BIAS_DISABLE
    - Linux 4.9.5

  * KVM module handling different per Architecture - ppc64el (LP: #1657734)
    - [Config] powerpc: Add kvm-hv and kvm-pr to the generic inclusion list

  * ENA network driver moved to -extra (LP: #1657767)
    - [Config] Move Amazon ENA network driver to the main kernel package

  * [Hyper-V] netvsc: add rcu_read locked to netvsc callback (LP: #1657540)
    - netvsc: add rcu_read locking to netvsc callback

  * Backport 3 patches to fix bugs with AIX clients using IBMVSCSI Target Driver (LP: #1657194)
    - SAUCE: ibmvscsis: Fix max transfer length
    - SAUCE: ibmvscsis: fix sleeping in interrupt context
    - SAUCE: ibmvscsis: Fix srp_transfer_data fail return code

linux (4.9.0-14.15) zesty; urgency=low

  [ Tim Gardner ]

  * Release Tracking Bug
    - LP: #1656889

  * Zesty update to v4.9.4 stable release (LP: #1656861)
    - net: vrf: Fix NAT within a VRF
    - net: vrf: Drop conntrack data after pass through VRF device on Tx
    - sctp: sctp_transport_lookup_process should rcu_read_unlock when transport is null
    - inet: fix IP(V6)_RECVORIGDSTADDR for udp sockets
    - ipv6: handle -EFAULT from skb_copy_bits
    - net, sched: fix soft lockup in tc_classify
    - net: stmmac: Fix race between stmmac_drv_probe and stmmac_open
    - net/sched: cls_flower: Fix missing addr_type in classify
    - net/mlx5: Check FW limitations on log_max_qp before setting it
    - net/mlx5: Cancel recovery work in remove flow
    - net/mlx5: Avoid shadowing numa_node
    - net/mlx5: Mask destination mac value in ethtool steering rules
    - net/mlx5: Prevent setting multicast macs for VFs
    - net/mlx5e: Don't sync netdev state when not registered
    - net/mlx5e: Disable netdev after close
    - rtnl: stats - add missing netlink message size checks
    - net: fix incorrect original ingress device index in PKTINFO
    - net: ipv4: dst for local input routes should use l3mdev if relevant
    - drop_monitor: add missing call to genlmsg_end
    - drop_monitor: consider inserted data in genlmsg_end
    - flow_dissector: Update pptp handling to avoid null pointer deref.
    - igmp: Make igmp group member RFC 3376 compliant
    - ipv4: Do not allow MAIN to be alias for new LOCAL w/ custom rules
    - net: vrf: Add missing Rx counters
    - bpf: change back to orig prog on too many passes
    - net: dsa: bcm_sf2: Do not clobber b53_switch_ops
    - net: dsa: bcm_sf2: Utilize nested MDIO read/write
    - r8152: split rtl8152_suspend function
    - r8152: fix rx issue for runtime suspend
    - net: dsa: Ensure validity of dst->ds[0]
    - net: add the AF_QIPCRTR entries to family name tables
    - gro: Enter slow-path if there is no tailroom
    - gro: use min_t() in skb_gro_reset_offset()
    - gro: Disable frag0 optimization on IPv6 ext headers
    - net/mlx5e: Remove WARN_ONCE from adaptive moderation code
    - net: ipv4: Fix multipath selection with vrf
    - net: vrf: do not allow table id 0
    - HID: hid-cypress: validate length of report
    - ALSA: firewire-tascam: Fix to handle error from initialization of stream data
    - powerpc: Fix build warning on 32-bit PPC
    - tools/virtio: fix READ_ONCE()
    - arm64: dts: mt8173: Fix auxadc node
    - ARM64: dts: bcm2837-rpi-3-b: remove incorrect pwr LED
    - ARM64: dts: bcm2835: Fix bcm2837 compatible string
    - ARM: pxa: fix pxa25x interrupt init
    - ARM: zynq: Reserve correct amount of non-DMA RAM
    - ARM: qcom_defconfig: Fix MDM9515 LCC and GCC config
    - svcrdma: Clear xpt_bc_xps in xprt_setup_rdma_bc() error exit arm
    - bus: arm-ccn: Prevent hotplug callback leak
    - ARM: OMAP5: Fix mpuss_early_init
    - ARM: OMAP5: Fix build for PM code
    - ARM: OMAP4+: Fix bad fallthrough for cpuidle
    - ARM: 8631/1: clkdev: Detect errors in clk_hw_register_clkdev() for mass registration
    - ARM: omap2+: am437x: rollback to use omap3_gptimer_timer_init()
    - spi: mvebu: fix baudrate calculation for armada variant
    - ALSA: usb-audio: Add a quirk for Plantronics BT600
    - drm/i915/gen9: Fix PCODE polling during CDCLK change notification
    - rtlwifi: rtl_usb: Fix missing entry in USB driver's private data
    - Linux 4.9.4

linux (4.9.0-13.14) zesty; urgency=low

  [ Tim Gardner ]

  * Release Tracking Bug
    - LP: #1656016

  * Zesty update to v4.9.3 stable release (LP: #1655956)
    - iio: common: st_sensors: fix channel data parsing
    - iio: max44000: correct value in illuminance_integration_time_available
    - iio: bmi160: Fix time needed to sleep after command execution
    - staging: octeon: Call SET_NETDEV_DEV()
    - ALSA: hda - Fix up GPIO for ASUS ROG Ranger
    - ALSA: hda - Apply asus-mode8 fixup to ASUS X71SL
    - ALSA: usb-audio: Fix irq/process data synchronization
    - fscrypt: fix renaming and linking special files
    - parisc: Add line-break when printing segfault info
    - parisc: Mark cr16 clocksource unstable on SMP systems
    - HID: sensor-hub: Move the memset to sensor_hub_get_feature()
    - ARM: davinci: da850: don't add emac clock to lookup table twice
    - pinctrl/amd: Set the level based on ACPI tables
    - mac80211: initialize fast-xmit 'info' later
    - asm-prototypes: Clear any CPP defines before declaring the functions
    - gcc-plugins: update gcc-common.h for gcc-7
    - drm/i915: Fix oopses in the overlay code due to i915_gem_active stuff
    - drm/i915: Fix oops in overlay due to frontbuffer tracking
    - drm/i915: Force VDD off on the new power seqeuencer before starting to use it
    - drm/i915: Initialize overlay->last_flip properly
    - KVM: x86: reset MMU on KVM_SET_VCPU_EVENTS
    - KVM: MIPS: Don't clobber CP0_Status.UX
    - KVM: MIPS: Flush KVM entry code from icache globally
    - usb: musb: core: add clear_ep_rxintr() to musb_platform_ops
    - usb: musb: dsps: implement clear_ep_rxintr() callback
    - usb: storage: unusual_uas: Add JMicron JMS56x to unusual device
    - usb: gadgetfs: restrict upper bound on device configuration size
    - USB: gadgetfs: fix unbounded memory allocation bug
    - USB: gadgetfs: fix use-after-free bug
    - USB: gadgetfs: fix checks of wTotalLength in config descriptors
    - USB: fix problems with duplicate endpoint addresses
    - USB: dummy-hcd: fix bug in stop_activity (handle ep0)
    - usb: gadget: composite: Test get_alt() presence instead of set_alt()
    - usb: dwc3: core: avoid Overflow events
    - usb: xhci: fix possible wild pointer
    - usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Apollo Lake
    - xhci: free xhci virtual devices with leaf nodes first
    - usb: xhci: fix return value of xhci_setup_device()
    - usb: host: xhci: Fix possible wild pointer when handling abort command
    - xhci: Handle command completion and timeout race
    - usb: xhci: hold lock over xhci_abort_cmd_ring()
    - usb: return error code when platform_get_irq fails
    - USB: serial: omninet: fix NULL-derefs at open and disconnect
    - USB: serial: quatech2: fix sleep-while-atomic in close
    - USB: serial: pl2303: fix NULL-deref at open
    - USB: serial: keyspan_pda: verify endpoints at probe
    - USB: serial: spcp8x5: fix NULL-deref at open
    - USB: serial: io_ti: fix NULL-deref at open
    - USB: serial: io_ti: fix another NULL-deref at open
    - USB: serial: io_ti: fix I/O after disconnect
    - USB: serial: iuu_phoenix: fix NULL-deref at open
    - USB: serial: garmin_gps: fix memory leak on failed URB submit
    - USB: serial: ti_usb_3410_5052: fix NULL-deref at open
    - USB: serial: io_edgeport: fix NULL-deref at open
    - USB: serial: oti6858: fix NULL-deref at open
    - USB: serial: cyberjack: fix NULL-deref at open
    - USB: serial: kobil_sct: fix NULL-deref in write
    - USB: serial: mos7840: fix NULL-deref at open
    - USB: serial: mos7720: fix NULL-deref at open
    - USB: serial: mos7720: fix use-after-free on probe errors
    - USB: serial: mos7720: fix parport use-after-free on probe errors
    - USB: serial: mos7720: fix parallel probe
    - usb: xhci-mem: use passed in GFP flags instead of GFP_KERNEL
    - xhci: Use delayed_work instead of timer for command timeout
    - xhci: Fix race related to abort operation
    - usb: dwc3: pci: add Intel Gemini Lake PCI ID
    - usb: dwc3: pci: Fix dr_mode misspelling
    - usb: dwc3: gadget: Fix full speed mode
    - usb: musb: Fix trying to free already-free IRQ 4
    - usb: hub: Move hub_port_disable() to fix warning if PM is disabled
    - usb: gadget: udc: core: fix return code of usb_gadget_probe_driver()
    - usb: musb: blackfin: add bfin_fifo_offset in bfin_ops
    - ALSA: usb-audio: Fix bogus error return in snd_usb_create_stream()
    - USB: serial: kl5kusb105: abort on open exception path
    - usb: gadget: Fix second argument of percpu_ida_alloc()
    - usb: gadget: fix request length error for isoc transfer
    - ARM: dts: r8a7794: Correct hsusb parent clock
    - USB: phy: am335x-control: fix device and of_node leaks
    - arm64: dts: hip06: Correct hardware pin number of usb node
    - ARM: dts: sun7i: bananapi-m1-plus: Enable USB PHY for USB host support
    - dibusb: fix possible memory leak in dibusb_rc_query()
    - USB: serial: io_ti: bind to interface after fw download
    - mei: fix parameter rename KDoc
    - mei: bus: fix mei_cldev_enable KDoc
    - mei: move write cb to completion on credentials failures
    - staging: iio: ad7606: fix improper setting of oversampling pins
    - iio: accel: st_accel: fix LIS3LV02 reading and scaling
    - usb: dwc3: ep0: add dwc3_ep0_prepare_one_trb()
    - usb: dwc3: ep0: explicitly call dwc3_ep0_prepare_one_trb()
    - usb: dwc3: gadget: always unmap EP0 requests
    - drm/i915/dp: add lane_count check in intel_dp_check_link_status
    - drm/i915: tune down the fast link training vs boot fail
    - mac80211: fix tid_agg_rx NULL dereference
    - nl80211: Use different attrs for BSSID and random MAC addr in scan req
    - ath10k: fix failure to send NULL func frame for 10.4
    - mfd: tps65217: Fix page fault on unloading modules
    - ath10k: use the right length of "background"
    - cris: Only build flash rescue image if CONFIG_ETRAX_AXISFLASHMAP is selected
    - efi/efivar_ssdt_load: Don't return success on allocation failure
    - clk: renesas: cpg-mssr: Fix inverted debug check
    - debugfs: improve DEFINE_DEBUGFS_ATTRIBUTE for !CONFIG_DEBUG_FS
    - x86/prctl/uapi: Remove #ifdef for CHECKPOINT_RESTORE
    - x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6
    - platform/x86: fujitsu-laptop: use brightness_set_blocking for LED-setting callbacks
    - hwmon: (scpi) Fix module autoload
    - hwmon: (amc6821) sign extension temperature
    - hwmon: (ds620) Fix overflows seen when writing temperature limits
    - hwmon: (nct7802) Fix overflows seen when writing into limit attributes
    - hwmon: (g762) Fix overflows and crash seen when writing limit attributes
    - hwmon: (lm90) fix temp1_max_alarm attribute
    - Input: synaptics-rmi4 - unlock on error
    - clk: qcom: ipq806x: Fix board clk rates
    - clk: clk-wm831x: fix a logic error
    - clk: ti: dra7: fix "failed to lookup clock node gmac_gmii_ref_clk_div" boot message
    - clk: sunxi-ng: sun8i-a23: Set CLK_SET_RATE_PARENT for audio module clocks
    - clk: sunxi-ng: sun8i-h3: Set CLK_SET_RATE_PARENT for audio module clocks
    - clk: imx31: fix rewritten input argument of mx31_clocks_init()
    - clk: renesas: mstp: Support 8-bit registers for r7s72100
    - iommu/amd: Missing error code in amd_iommu_init_device()
    - iommu/amd: Fix the left value check of cmd buffer
    - iommu/vt-d: Fix pasid table size encoding
    - iommu/vt-d: Flush old iommu caches for kdump when the device gets context mapped
    - ASoC: lpass-platform: initialize dma channel number
    - ASoC: cht_bsw_rt5645: Fix leftover kmalloc
    - ASoC: Intel: Skylake: Fix a shift wrapping bug
    - ASoC: samsung: i2s: Fixup last IRQ unsafe spin lock call
    - scsi: g_NCR5380: Fix release_region in error handling
    - scsi: mvsas: fix command_active typo
    - target/iscsi: Fix double free in lio_target_tiqn_addtpg()
    - sbp-target: Fix second argument of percpu_ida_alloc()
    - relay: check array offset before using it
    - ima: fix memory leak in ima_release_policy
    - PCI/MSI: Check for NULL affinity mask in pci_irq_get_affinity()
    - irqchip/bcm7038-l1: Implement irq_cpu_offline() callback
    - PM / wakeirq: Fix dedicated wakeirq for drivers not using autosuspend
    - genirq/affinity: Fix node generation from cpumask
    - mmc: mmc_test: Uninitialized return value
    - rpmsg: qcom_smd: Correct return value for O_NONBLOCK
    - mm/hugetlb.c: use the right pte val for compare in hugetlb_cow
    - docs-rst: fix LaTeX \DURole renewcommand with Sphinx 1.3+
    - mm: khugepaged: close use-after-free race during shmem collapsing
    - mm: khugepaged: fix radix tree node leak in shmem collapse error path
    - mm, compaction: fix NR_ISOLATED_* stats for pfn based migration
    - s390/crypto: unlock on error in prng_tdes_read()
    - crypto: arm64/sha2-ce - fix for big endian
    - crypto: arm64/ghash-ce - fix for big endian
    - crypto: arm/aes-ce - fix for big endian
    - crypto: arm64/aes-ccm-ce: fix for big endian
    - crypto: arm64/aes-neon - fix for big endian
    - crypto: arm64/sha1-ce - fix for big endian
    - crypto: arm64/aes-xts-ce: fix for big endian
    - crypto: arm64/aes-ce - fix for big endian
    - md: MD_RECOVERY_NEEDED is set for mddev->recovery
    - md: fix refcount problem on mddev when stopping array.
    - f2fs: remove percpu_count due to performance regression
    - f2fs: hide a maybe-uninitialized warning
    - staging: media: davinci_vpfe: unlock on error in vpfe_reqbufs()
    - PCI: rockchip: Fix negotiated lanes calculation
    - PCI: rockchip: Correct the use of FTS mask
    - PCI: Add Mellanox device IDs
    - PCI: Convert broken INTx masking quirks from HEADER to FINAL
    - PCI: Convert Mellanox broken INTx quirks to be for listed devices only
    - PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+
    - PCI: Enable access to non-standard VPD for Chelsio devices (cxgb3)
    - powerpc/pci/rpadlpar: Fix device reference leaks
    - s390/topology: always use s390 specific sched_domain_topology_level
    - s390/pci: fix dma address calculation in map_sg
    - drm/radeon: Always store CRTC relative radeon_crtc->cursor_x/y values
    - drm/i915: disable PSR by default on HSW/BDW
    - drm/i915/gen9: unconditionally apply the memory bandwidth WA
    - drm/i915/gen9: fix the WM memory bandwidth WA for Y tiling cases
    - tpm_tis: Check return values from get_burstcount.
    - xfs: don't call xfs_sb_quota_from_disk twice
    - xfs: check return value of _trans_reserve_quota_nblks
    - xfs: don't skip cow forks w/ delalloc blocks in cowblocks scan
    - xfs: don't BUG() on mixed direct and mapped I/O
    - xfs: provide helper for counting extents from if_bytes
    - xfs: check minimum block size for CRC filesystems
    - xfs: fix unbalanced inode reclaim flush locking
    - xfs: new inode extent list lookup helpers
    - xfs: factor rmap btree size into the indlen calculations
    - xfs: always succeed when deduping zero bytes
    - xfs: remove prev argument to xfs_bmapi_reserve_delalloc
    - xfs: track preallocation separately in xfs_bmapi_reserve_delalloc()
    - xfs: use new extent lookup helpers in __xfs_reflink_reserve_cow
    - xfs: clean up cow fork reservation and tag inodes correctly
    - xfs: use new extent lookup helpers xfs_file_iomap_begin_delay
    - xfs: pass post-eof speculative prealloc blocks to bmapi
    - xfs: Move AGI buffer type setting to xfs_read_agi
    - xfs: pass state not whichfork to trace_xfs_extlist
    - xfs: handle cow fork in xfs_bmap_trace_exlist
    - xfs: forbid AG btrees with level == 0
    - xfs: check for bogus values in btree block headers
    - xfs: complain if we don't get nextents bmap records
    - xfs: don't crash if reading a directory results in an unexpected hole
    - xfs: error out if trying to add attrs and anextents > 0
    - xfs: don't allow di_size with high bit set
    - xfs: don't cap maximum dedupe request length
    - xfs: ignore leaf attr ichdr.count in verifier during log replay
    - xfs: use GPF_NOFS when allocating btree cursors
    - xfs: fix double-cleanup when CUI recovery fails
    - xfs: use the actual AG length when reserving blocks
    - xfs: fix crash and data corruption due to removal of busy COW extents
    - xfs: fix max_retries _show and _store functions
    - clocksource/dummy_timer: Move hotplug callback after the real timers
    - tick/broadcast: Prevent NULL pointer dereference
    - Revert "rtlwifi: Fix enter/exit power_save"
    - Revert "usb: gadget: composite: always set ep->mult to a sensible value"
    - usb: gadget: composite: always set ep->mult to a sensible value
    - Linux 4.9.3

  * netfilter regression introducing a performance slowdown in binary arp/ip/ip6tables (LP: #1640786)
    - netfilter: x_tables: pass xt_counters struct instead of packet counter
    - netfilter: x_tables: pass xt_counters struct to counter allocator
    - netfilter: x_tables: pack percpu counter allocations

  * Move some kernel modules to the main kernel package (part 2) (LP: #1655002)
    - [Config] Add IBM power drivers to the inclusion list

  * Miscellaneous Ubuntu changes
    - [Config] linux-source Provides should not be a macro

 -- Tim Gardner <email address hidden>  Tue, 24 Jan 2017 10:21:57 -0700