[PATCH 4.6 00/81] 4.6.3-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 4.6.3 release.
There are 81 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri Jun 24 22:36:56 UTC 2016.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.6.3-rc1.gz
or in the git tree and branch at:
  git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 4.6.3-rc1

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Revert "drm/i915: Exit cherryview_irq_handler() after one pass"

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: don't reject valid target size on some architectures

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: validate all offsets and sizes in a rule

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: check for bogus target offset

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: check standard target size too

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: add compat version of xt_check_entry_offsets

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: assert minimum target size

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: kill check_entry helper

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: add and use xt_check_entry_offsets

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: validate targets of jumps

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: don't move to non-existent next rule

Maarten Lankhorst <maarten.lankhorst@linux.intel.com>
    drm/core: Do not preserve framebuffer on rmfb, v4.

Helmut Grohne <h.grohne@intenta.de>
    gpio: zynq: initialize clock even without CONFIG_PM

Shubhrajyoti Datta <shubhrajyoti.datta@xilinx.com>
    gpio: zynq: Fix the error path

David S. Miller <davem@davemloft.net>
    sparc64: Fix return from trap window fill crashes.

David S. Miller <davem@davemloft.net>
    sparc: Harden signal return frame checks.

David S. Miller <davem@davemloft.net>
    sparc64: Take ctx_alloc_lock properly in hugetlb_setup().

Nitin Gupta <nitin.m.gupta@oracle.com>
    sparc64: Reduce TLB flushes during hugepte changes

Al Viro <viro@zeniv.linux.org.uk>
    fix d_walk()/non-delayed __d_free() race

Jann Horn <jannh@google.com>
    sched: panic on corrupted stack end

Jann Horn <jannh@google.com>
    proc: prevent stacking filesystems on top

Andy Lutomirski <luto@kernel.org>
    x86/entry/traps: Don't force in_interrupt() to return true in IST handlers

Gerald Schaefer <gerald.schaefer@de.ibm.com>
    mm: thp: broken page count after commit aa88b68c3b1d

Prasun Maiti <prasunmaiti87@gmail.com>
    wext: Fix 32 bit iwpriv compatibility issue with 64 bit Kernel

Jann Horn <jannh@google.com>
    ecryptfs: forbid opening files without mmap handler

Tejun Heo <tj@kernel.org>
    memcg: add RCU locking around css_for_each_descendant_pre() in memcg_offline_kmem()

Helge Deller <deller@gmx.de>
    parisc: Fix pagefault crash in unaligned __get_user() call

hongkun.cao <hongkun.cao@mediatek.com>
    pinctrl: mediatek: fix dual-edge code defect

Aneesh Kumar K.V <aneesh.kumar@linux.vnet.ibm.com>
    powerpc/mm/hash: Fix the reference bit update when handling hash fault

Thomas Huth <thuth@redhat.com>
    powerpc/pseries: Add POWER8NVL support to ibm,client-architecture-support call

Thomas Huth <thuth@redhat.com>
    powerpc: Use privileged SPR number for MMCR2

Thomas Huth <thuth@redhat.com>
    powerpc: Fix definition of SIAR and SDAR registers

Russell Currey <ruscur@russell.cc>
    powerpc/pseries/eeh: Handle RTAS delay requests in configure_bridge

Will Deacon <will.deacon@arm.com>
    arm64: mm: always take dirty state from new pte in ptep_set_access_flags

Catalin Marinas <catalin.marinas@arm.com>
    arm64: Provide "model name" in /proc/cpuinfo for PER_LINUX32 tasks

Tom Lendacky <thomas.lendacky@amd.com>
    crypto: ccp - Fix AES XTS error for request sizes above 4096

Arnd Bergmann <arnd@arndb.de>
    crypto: public_key: select CRYPTO_AKCIPHER

Marc Zyngier <marc.zyngier@arm.com>
    irqchip/gic-v3: Fix ICC_SGI1R_EL1.INTID decoding mask

Michael Holzheu <holzheu@linux.vnet.ibm.com>
    s390/bpf: reduce maximum program size to 64 KB

Michael Holzheu <holzheu@linux.vnet.ibm.com>
    s390/bpf: fix recache skb->data/hlen for skb_vlan_push/pop

Ricardo Ribalda Delgado <ricardo.ribalda@gmail.com>
    gpiolib: Fix unaligned used of reference counters

Ricardo Ribalda Delgado <ricardo.ribalda@gmail.com>
    gpiolib: Fix NULL pointer deference

Ben Dooks <ben.dooks@codethink.co.uk>
    gpio: bcm-kona: fix bcm_kona_gpio_reset() warnings

Linus Walleij <linus.walleij@linaro.org>
    gpio: bail out silently on NULL descriptors

Russell King <rmk+kernel@armlinux.org.uk>
    ARM: fix PTRACE_SETVFPREGS on SMP systems

Torsten Hilbrich <torsten.hilbrich@secunet.com>
    ALSA: hda/realtek: Add T560 docking unit fixup

Kailang Yang <kailang@realtek.com>
    ALSA: hda/realtek - Add support for new codecs ALC700/ALC701/ALC703

Kailang Yang <kailang@realtek.com>
    ALSA: hda/realtek - ALC256 speaker noise issue

AceLan Kao <acelan.kao@canonical.com>
    ALSA: hda - Fix headset mic detection problem for Dell machine

Vinod Koul <vinod.koul@intel.com>
    ALSA: hda - Add PCI ID for Kabylake

Julien Grall <julien.grall@arm.com>
    drivers/perf: arm_pmu: Defer the setting of __oprofile_cpu_pmu

Paolo Bonzini <pbonzini@redhat.com>
    KVM: irqfd: fix NULL pointer dereference in kvm_irq_map_gsi

Paolo Bonzini <pbonzini@redhat.com>
    KVM: x86: fix OOPS after invalid KVM_SET_DEBUGREGS

Christoffer Dall <christoffer.dall@linaro.org>
    KVM: arm/arm64: vgic-v3: Clear all dirty LRs

Christoffer Dall <christoffer.dall@linaro.org>
    KVM: arm/arm64: vgic-v2: Clear all dirty LRs

Jakub Sitnicki <jkbs@redhat.com>
    ipv6: Skip XFRM lookup if dst_entry in socket cache is valid

Guillaume Nault <g.nault@alphalink.fr>
    l2tp: fix configuration passed to setup_udp_tunnel_sock()

Toshiaki Makita <makita.toshiaki@lab.ntt.co.jp>
    bridge: Don't insert unnecessary local fdb entry on changing mac address

Yuchung Cheng <ycheng@google.com>
    tcp: record TLP and ER timer stats in v6 stats

Daniel Borkmann <daniel@iogearbox.net>
    bpf, trace: use READ_ONCE for retrieving file ptr

Elad Kanfi <eladkan@mellanox.com>
    net: nps_enet: Disable interrupts before napi reschedule

Chen Haiquan <oc@yunify.com>
    vxlan: Accept user specified MTU value when create new vxlan link

Marek Vasut <marex@denx.de>
    net: stmmac: Fix incorrect memcpy source memory

Feng Tang <feng.tang@intel.com>
    net: alx: use custom skb allocator

Ivan Vecera <ivecera@redhat.com>
    team: don't call netdev_change_features under team->lock

Edward Cree <ecree@solarflare.com>
    sfc: on MC reset, clear PIO buffer linkage in TXQs

Gregory CLEMENT <gregory.clement@free-electrons.com>
    net: hwbm: Fix unbalanced spinlock in error case

Gregory CLEMENT <gregory.clement@free-electrons.com>
    net: mvneta: Fix lacking spinlock initialization

Daniel Borkmann <daniel@iogearbox.net>
    bpf, inode: disallow userns mounts

Ezequiel Garcia <ezequiel@vanguardiasur.com.ar>
    ipv4: Fix non-initialized TTL when CONFIG_SYSCTL=n

Nicolas Dichtel <nicolas.dichtel@6wind.com>
    uapi glibc compat: fix compilation when !__USE_MISC in glibc

Hannes Frederic Sowa <hannes@stressinduktion.org>
    udp: prevent skbs lingering in tunnel socket queues

Eric W. Biederman <ebiederm@xmission.com>
    bpf: Use mount_nodev not mount_ns to mount the bpf filesystem

Jason Wang <jasowang@redhat.com>
    tuntap: correctly wake up process during uninit

Sabrina Dubroca <sd@queasysnail.net>
    macsec: fix netlink attribute for key id

Jiri Pirko <jiri@mellanox.com>
    switchdev: pass pointer to fib_info instead of copy

Richard Alpe <richard.alpe@ericsson.com>
    tipc: fix nametable publication field in nl compat

Herbert Xu <herbert@gondor.apana.org.au>
    netlink: Fix dump skb leak/double free

Richard Alpe <richard.alpe@ericsson.com>
    tipc: check nl sock before parsing nested attributes

Ewan D. Milne <emilne@redhat.com>
    scsi: Add QEMU CD-ROM to VPD Inquiry Blacklist

James Bottomley <James.Bottomley@HansenPartnership.com>
    scsi_lib: correctly retry failed zero length REQ_TYPE_FS commands


-------------

Diffstat:

 Makefile                                          |   4 +-
 arch/arm/kernel/ptrace.c                          |   2 +-
 arch/arm64/include/asm/elf.h                      |   4 +-
 arch/arm64/kernel/cpuinfo.c                       |   8 +-
 arch/arm64/kvm/hyp/vgic-v3-sr.c                   |   7 +-
 arch/arm64/mm/fault.c                             |   2 +-
 arch/parisc/kernel/unaligned.c                    |  10 +-
 arch/powerpc/include/asm/reg.h                    |   6 +-
 arch/powerpc/kernel/prom_init.c                   |   1 +
 arch/powerpc/mm/hash_utils_64.c                   |  22 ++-
 arch/powerpc/platforms/pseries/eeh_pseries.c      |  51 +++++--
 arch/s390/net/bpf_jit.h                           |   4 +-
 arch/s390/net/bpf_jit_comp.c                      |   4 +-
 arch/sparc/include/asm/head_64.h                  |   4 +
 arch/sparc/include/asm/pgtable_64.h               |  43 ++++--
 arch/sparc/include/asm/tlbflush_64.h              |   3 +-
 arch/sparc/include/asm/ttable.h                   |   8 +-
 arch/sparc/kernel/Makefile                        |   1 +
 arch/sparc/kernel/rtrap_64.S                      |  57 ++------
 arch/sparc/kernel/signal32.c                      |  46 ++++---
 arch/sparc/kernel/signal_32.c                     |  41 ++++--
 arch/sparc/kernel/signal_64.c                     |  31 +++--
 arch/sparc/kernel/sigutil_32.c                    |   9 +-
 arch/sparc/kernel/sigutil_64.c                    |  10 +-
 arch/sparc/kernel/urtt_fill.S                     |  98 ++++++++++++++
 arch/sparc/mm/hugetlbpage.c                       |  33 ++++-
 arch/sparc/mm/init_64.c                           |  22 +--
 arch/sparc/mm/tlb.c                               |  25 +++-
 arch/sparc/mm/tsb.c                               |  32 +++--
 arch/x86/kernel/traps.c                           |  20 +--
 arch/x86/kvm/x86.c                                |   5 +
 crypto/asymmetric_keys/Kconfig                    |   1 +
 drivers/crypto/ccp/ccp-crypto-aes-xts.c           |  17 ++-
 drivers/gpio/gpio-bcm-kona.c                      |   4 +-
 drivers/gpio/gpio-zynq.c                          |  11 +-
 drivers/gpio/gpiolib.c                            |  17 ++-
 drivers/gpu/drm/drm_crtc.c                        |  60 +++++++-
 drivers/gpu/drm/i915/i915_irq.c                   |   4 +-
 drivers/net/ethernet/atheros/alx/alx.h            |   4 +
 drivers/net/ethernet/atheros/alx/main.c           |  48 ++++++-
 drivers/net/ethernet/ezchip/nps_enet.c            |   4 +-
 drivers/net/ethernet/marvell/mvneta_bm.c          |   1 +
 drivers/net/ethernet/rocker/rocker_ofdpa.c        |   4 +-
 drivers/net/ethernet/sfc/ef10.c                   |  16 +++
 drivers/net/ethernet/stmicro/stmmac/stmmac_mdio.c |   2 +-
 drivers/net/geneve.c                              |  10 +-
 drivers/net/macsec.c                              |   4 +-
 drivers/net/team/team.c                           |   9 +-
 drivers/net/tun.c                                 |   6 +-
 drivers/net/vxlan.c                               |   7 +-
 drivers/perf/arm_pmu.c                            |   6 +-
 drivers/pinctrl/mediatek/pinctrl-mtk-common.c     |   5 +-
 drivers/scsi/scsi_devinfo.c                       |   1 +
 drivers/scsi/scsi_lib.c                           |   7 +-
 fs/dcache.c                                       |   4 +-
 fs/ecryptfs/kthread.c                             |  13 +-
 fs/proc/root.c                                    |   7 +
 include/linux/irqchip/arm-gic-v3.h                |   2 +-
 include/linux/netfilter/x_tables.h                |   7 +
 include/net/switchdev.h                           |   2 +-
 include/uapi/linux/libc-compat.h                  |   2 +-
 kernel/bpf/inode.c                                |   3 +-
 kernel/sched/core.c                               |   3 +-
 kernel/trace/bpf_trace.c                          |   4 +-
 mm/memcontrol.c                                   |   3 +
 mm/swap_state.c                                   |   5 +-
 net/bridge/br_fdb.c                               |   2 +
 net/core/hwbm.c                                   |   3 +
 net/ipv4/af_inet.c                                |   8 ++
 net/ipv4/netfilter/arp_tables.c                   |  54 ++++----
 net/ipv4/netfilter/ip_tables.c                    |  52 ++++---
 net/ipv4/sysctl_net_ipv4.c                        |   4 -
 net/ipv4/udp.c                                    |   2 +-
 net/ipv6/ip6_output.c                             |  11 +-
 net/ipv6/netfilter/ip6_tables.c                   |  52 ++++---
 net/ipv6/tcp_ipv6.c                               |   4 +-
 net/ipv6/udp.c                                    |   2 +-
 net/l2tp/l2tp_core.c                              |   2 +-
 net/netfilter/x_tables.c                          | 158 ++++++++++++++++++++++
 net/netlink/af_netlink.c                          |   7 +-
 net/switchdev/switchdev.c                         |   6 +-
 net/tipc/netlink_compat.c                         |   2 +-
 net/tipc/socket.c                                 |   3 +
 net/wireless/wext-core.c                          |  25 +++-
 sound/pci/hda/hda_intel.c                         |  11 +-
 sound/pci/hda/patch_realtek.c                     |  73 +++++++++-
 virt/kvm/arm/hyp/vgic-v2-sr.c                     |   7 +-
 virt/kvm/irqchip.c                                |   2 +-
 88 files changed, 1044 insertions(+), 362 deletions(-)