[PATCH 4.4 000/101] 4.4.76-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 4.4.76 release.
There are 101 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed Jul  5 13:32:59 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.76-rc1.gz
or in the git tree and branch at:
  git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 4.4.76-rc1

Wanpeng Li <wanpeng.li@hotmail.com>
    KVM: nVMX: Fix exception injection

Radim Krčmář <rkrcmar@redhat.com>
    KVM: x86: zero base3 of unusable segments

Radim Krčmář <rkrcmar@redhat.com>
    KVM: x86/vPMU: fix undefined shift in intel_pmu_refresh()

Ladi Prosek <lprosek@redhat.com>
    KVM: x86: fix emulation of RSM and IRET instructions

Dan Carpenter <dan.carpenter@oracle.com>
    cpufreq: s3c2416: double free on driver init error path

Pan Bian <bianpan2016@163.com>
    iommu/amd: Fix incorrect error handling in amd_iommu_bind_pasid()

Robin Murphy <robin.murphy@arm.com>
    iommu: Handle default domain attach failure

David Dillow <dillow@google.com>
    iommu/vt-d: Don't over-free page table directories

Junxiao Bi <junxiao.bi@oracle.com>
    ocfs2: o2hb: revert hb threshold to keep compatible

Andy Lutomirski <luto@kernel.org>
    x86/mm: Fix flush_tlb_page() on Xen

Joerg Roedel <jroedel@suse.de>
    x86/mpx: Correctly report do_mpx_bt_fault() failures to user-space

Doug Berger <opendmb@gmail.com>
    ARM: 8685/1: ensure memblock-limit is pmd-aligned

Lorenzo Pieralisi <lorenzo.pieralisi@arm.com>
    ARM64/ACPI: Fix BAD_MADT_GICC_ENTRY() macro implementation

Matt Fleming <matt@codeblueprint.co.uk>
    sched/loadavg: Avoid loadavg spikes caused by delayed NO_HZ accounting

Eric Anholt <eric@anholt.net>
    watchdog: bcm281xx: Fix use of uninitialized spinlock.

Dan Carpenter <dan.carpenter@oracle.com>
    xfrm: Oops on error in pfkey_msg2xfrm_state()

Dan Carpenter <dan.carpenter@oracle.com>
    xfrm: NULL dereference on allocation failure

Sabrina Dubroca <sd@queasysnail.net>
    xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICY

Gleb Fotengauer-Malinovskiy <glebfm@altlinux.org>
    jump label: fix passing kbuild_cflags when checking for asm goto support

Eugeniu Rosca <erosca@de.adit-jv.com>
    ravb: Fix use-after-free on `ifconfig eth0 down`

Xin Long <lucien.xin@gmail.com>
    sctp: check af before verify address in sctp_addr_id2transport

Jack Morgenstein <jackm@dev.mellanox.co.il>
    net/mlx4_core: Eliminate warning messages for SRQ_LIMIT under SRIOV

Masami Hiramatsu <mhiramat@kernel.org>
    perf probe: Fix to show correct locations for events on modules

Ivan Vecera <cera@cera.cz>
    be2net: fix status check in be_cmd_pmac_add()

Heiko Carstens <heiko.carstens@de.ibm.com>
    s390/ctl_reg: make __ctl_load a full memory barrier

Nikita Yushchenko <nikita.yoush@cogentembedded.com>
    swiotlb: ensure that page-sized mappings are page-aligned

Dave Kleikamp <dave.kleikamp@oracle.com>
    coredump: Ensure proper size of sparse core files

Tobias Klauser <tklauser@distanz.ch>
    x86/mpx: Use compatible types in comparison to fix sparse error

Felix Fietkau <nbd@nbd.name>
    mac80211: initialize SMPS field in HT capabilities

Ard Biesheuvel <ard.biesheuvel@linaro.org>
    arm64: assembler: make adr_l work in modules under KASLR

Kevin Hilman <khilman@baylibre.com>
    spi: davinci: use dma_mapping_error()

Roberto Sassu <rsassu@suse.de>
    scsi: lpfc: avoid double free of resource identifiers

Brendan McGrath <redmcg@redmandi.dyndns.org>
    HID: i2c-hid: Add sleep between POWER ON and RESET

Jiri Slaby <jslaby@suse.cz>
    kernel/panic.c: add missing \n

Thomas Huth <thuth@redhat.com>
    ibmveth: Add a proper check for the availability of the checksum features

Balakrishnan Raman <ramanb@cumulusnetworks.com>
    vxlan: do not age static remote mac entries

Michael S. Tsirkin <mst@redhat.com>
    virtio_net: fix PAGE_SIZE > 64k

Greg Kurz <groug@kaod.org>
    vfio/spapr: fail tce_iommu_attach_group() when iommu_data is null

Ding Pixel <pding@amd.com>
    drm/amdgpu: check ring being ready before using

Florian Fainelli <f.fainelli@gmail.com>
    net: dsa: Check return value of phy_connect_direct()

Lendacky, Thomas <Thomas.Lendacky@amd.com>
    amd-xgbe: Check xgbe_init() return code

Zach Ploskey <zach@ploskey.com>
    platform/x86: ideapad-laptop: handle ACPI event 1

Eric Farman <farman@linux.vnet.ibm.com>
    scsi: virtio_scsi: Reject commands when virtqueue is broken

Vineeth Remanan Pillai <vineethp@amazon.com>
    xen-netfront: Fix Rx stall during network stress and OOM

Colin Ian King <colin.king@canonical.com>
    net: sctp: fix array overrun read on sctp_timer_tbl

Stefano Stabellini <sstabellini@kernel.org>
    swiotlb-xen: update dev_addr after swapping pages

G. Campana <gcampana@quarkslab.com>
    virtio_console: fix a crash in config_work_handler

Liu Bo <bo.li.liu@oracle.com>
    Btrfs: fix truncate down when no_holes feature is enabled

Eric Dumazet <edumazet@google.com>
    gianfar: Do not reuse pages from emergency reserve

Gavin Shan <gwshan@linux.vnet.ibm.com>
    powerpc/eeh: Enable IO path on permanent error

Florian Fainelli <f.fainelli@gmail.com>
    net: bgmac: Remove superflous netif_carrier_on()

Florian Fainelli <f.fainelli@gmail.com>
    net: bgmac: Start transmit queue in bgmac_open

Florian Fainelli <f.fainelli@gmail.com>
    net: bgmac: Fix SOF bit checking

David S. Miller <davem@davemloft.net>
    bgmac: Fix reversed test of build_skb() return value.

Rafał Miłecki <zajec5@gmail.com>
    mtd: bcm47xxpart: don't fail because of bit-flips

wangweidong <wangweidong1@huawei.com>
    bgmac: fix a missing check for build_skb

Rafał Miłecki <zajec5@gmail.com>
    mtd: bcm47xxpart: limit scanned flash area on BCM47XX (MIPS) only

Álvaro Fernández Rojas <noltari@gmail.com>
    MIPS: ralink: fix MT7628 wled_an pinmux gpio

Álvaro Fernández Rojas <noltari@gmail.com>
    MIPS: ralink: fix MT7628 pinmux typos

John Crispin <blogic@openwrt.org>
    MIPS: ralink: Fix invalid assignment of SoC type

John Crispin <blogic@openwrt.org>
    MIPS: ralink: fix USB frequency scaling

John Crispin <blogic@openwrt.org>
    MIPS: ralink: MT7688 pinmux fixes

Florian Fainelli <f.fainelli@gmail.com>
    net: korina: Fix NAPI versus resources freeing

Felix Fietkau <nbd@nbd.name>
    MIPS: ath79: fix regression in PCI window initialization

Gregory CLEMENT <gregory.clement@free-electrons.com>
    net: mvneta: Fix for_each_present_cpu usage

Jon Mason <jon.mason@broadcom.com>
    ARM: dts: BCM5301X: Correct GIC_PPI interrupt flags

Quinn Tran <quinn.tran@cavium.com>
    qla2xxx: Fix erroneous invalid handle message

Johannes Thumshirn <jthumshirn@suse.de>
    scsi: lpfc: Set elsiocb contexts to NULL after freeing it

Damien Le Moal <damien.lemoal@wdc.com>
    scsi: sd: Fix wrong DPOFUA disable in sd_read_cache_type

Dmitry Vyukov <dvyukov@google.com>
    KVM: x86: fix fixing of hypercalls

Mark Rutland <mark.rutland@arm.com>
    mm: numa: avoid waiting on freed migrated pages

Roman Pen <roman.penyaev@profitbricks.com>
    block: fix module reference leak on put_disk() call for cgroups throttle

Kees Cook <keescook@chromium.org>
    sysctl: enable strict writes

Baolin Wang <baolin.wang@linaro.org>
    usb: gadget: f_fs: Fix possibe deadlock

Deepak Rawat <drawat@vmware.com>
    drm/vmwgfx: Free hash table allocated by cmdbuf managed res mgr

Hui Wang <hui.wang@canonical.com>
    ALSA: hda - set input_path bitmap to zero after moving it to new place

Takashi Iwai <tiwai@suse.de>
    ALSA: hda - Fix endless loop of codec configure

Paul Burton <paul.burton@imgtec.com>
    MIPS: Fix IRQ tracing & lockdep when rescheduling

Paul Burton <paul.burton@imgtec.com>
    MIPS: pm-cps: Drop manual cache-line alignment of ready_count

James Hogan <james.hogan@imgtec.com>
    MIPS: Avoid accidental raw backtrace

David Rientjes <rientjes@google.com>
    mm, swap_cgroup: reschedule when neeed in swap_cgroup_swapoff()

Russell Currey <ruscur@russell.cc>
    drm/ast: Handle configuration without P2A bridge

Kinglong Mee <kinglongmee@gmail.com>
    NFSv4: fix a reference leak caused WARNING messages

Eric Leblond <eric@regit.org>
    netfilter: synproxy: fix conntrackd interaction

Eric Dumazet <edumazet@google.com>
    netfilter: xt_TCPMSS: add more sanity tests on tcph->doff

Serhey Popovych <serhe.popovych@gmail.com>
    rtnetlink: add IFLA_GROUP to ifla_policy

Serhey Popovych <serhe.popovych@gmail.com>
    ipv6: Do not leak throw route references

Bert Kenward <bkenward@solarflare.com>
    sfc: provide dummy definitions of vswitch functions

Gao Feng <gfree.wind@vip.163.com>
    net: 8021q: Fix one possible panic caused by BUG_ON in free_netdev

Wei Wang <weiwan@google.com>
    decnet: always not take dst->__refcnt when inserting dst into hash table

Eli Cohen <eli@mellanox.com>
    net/mlx5: Wait for FW readiness before initializing command interface

Xin Long <lucien.xin@gmail.com>
    ipv6: fix calling in6_ifa_hold incorrectly for dad work

WANG Cong <xiyou.wangcong@gmail.com>
    igmp: add a missing spin_lock_init()

WANG Cong <xiyou.wangcong@gmail.com>
    igmp: acquire pmc lock for ip_mc_clear_src()

Jia-Ju Bai <baijiaju1990@163.com>
    net: caif: Fix a sleep-in-atomic bug in cfpkt_create_pfx

Krister Johansen <kjlx@templeofstupid.com>
    Fix an intermittent pr_emerg warning about lo becoming free.

Mateusz Jurczyk <mjurczyk@google.com>
    af_unix: Add sockaddr length checks before accessing sa_family in bind and connect handlers

Mintz, Yuval <Yuval.Mintz@cavium.com>
    net: Zero ifla_vf_info in rtnl_fill_vfinfo()

Mateusz Jurczyk <mjurczyk@google.com>
    decnet: dn_rtmsg: Improve input length sanitization in dnrmg_receive_user_skb

Alexander Potapenko <glider@google.com>
    net: don't call strlen on non-terminated string in dev_set_alias()

Willem de Bruijn <willemb@google.com>
    ipv6: release dst on error in ip6_dst_lookup_tail


-------------

Diffstat:

 Documentation/sysctl/kernel.txt                |  15 +-
 Makefile                                       |  16 +-
 arch/arm/boot/dts/bcm5301x.dtsi                |   4 +-
 arch/arm/mm/mmu.c                              |   8 +-
 arch/arm64/include/asm/acpi.h                  |   6 +-
 arch/arm64/include/asm/assembler.h             |  36 +++-
 arch/mips/ath79/common.c                       |  16 +-
 arch/mips/kernel/entry.S                       |   3 +
 arch/mips/kernel/pm-cps.c                      |   9 +-
 arch/mips/kernel/traps.c                       |   2 +
 arch/mips/ralink/mt7620.c                      |  84 +++++---
 arch/mips/ralink/rt288x.c                      |   2 +-
 arch/powerpc/kernel/eeh.c                      |  10 +-
 arch/s390/include/asm/ctl_reg.h                |   4 +-
 arch/x86/include/asm/kvm_emulate.h             |   4 +-
 arch/x86/kvm/emulate.c                         |  16 +-
 arch/x86/kvm/pmu_intel.c                       |   2 +-
 arch/x86/kvm/vmx.c                             |   2 +-
 arch/x86/kvm/x86.c                             |  20 +-
 arch/x86/mm/mpx.c                              |  12 +-
 arch/x86/mm/tlb.c                              |   4 +-
 block/blk-cgroup.c                             |   9 +
 drivers/char/virtio_console.c                  |   2 +-
 drivers/cpufreq/s3c2416-cpufreq.c              |   1 -
 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c         |   7 +
 drivers/gpu/drm/ast/ast_drv.h                  |   6 +-
 drivers/gpu/drm/ast/ast_main.c                 | 264 +++++++++++++++----------
 drivers/gpu/drm/ast/ast_post.c                 |   7 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf_res.c     |   1 +
 drivers/hid/i2c-hid/i2c-hid.c                  |   9 +
 drivers/iommu/amd_iommu_v2.c                   |   2 +-
 drivers/iommu/intel-iommu.c                    |   2 +-
 drivers/iommu/iommu.c                          |  37 ++--
 drivers/mtd/bcm47xxpart.c                      |  42 ++--
 drivers/net/ethernet/amd/xgbe/xgbe-dev.c       |   4 +-
 drivers/net/ethernet/amd/xgbe/xgbe-drv.c       |   4 +-
 drivers/net/ethernet/broadcom/bgmac.c          |  13 +-
 drivers/net/ethernet/emulex/benet/be_cmds.c    |   2 +-
 drivers/net/ethernet/freescale/gianfar.c       |   2 +-
 drivers/net/ethernet/ibm/ibmveth.c             |   7 +-
 drivers/net/ethernet/korina.c                  |   8 +-
 drivers/net/ethernet/marvell/mvneta.c          |   8 +-
 drivers/net/ethernet/mellanox/mlx4/eq.c        |  23 ++-
 drivers/net/ethernet/mellanox/mlx5/core/main.c |  14 +-
 drivers/net/ethernet/renesas/ravb_main.c       |  24 +--
 drivers/net/ethernet/sfc/falcon.c              |  10 +
 drivers/net/virtio_net.c                       |  10 +-
 drivers/net/vxlan.c                            |   2 +-
 drivers/net/xen-netfront.c                     |   2 +-
 drivers/platform/x86/ideapad-laptop.c          |   1 +
 drivers/scsi/lpfc/lpfc_els.c                   |   2 +
 drivers/scsi/lpfc/lpfc_sli.c                   |   7 +
 drivers/scsi/qla2xxx/qla_isr.c                 |   4 +
 drivers/scsi/qla2xxx/qla_target.c              |   2 +-
 drivers/scsi/sd.c                              |   3 +-
 drivers/scsi/virtio_scsi.c                     |  11 +-
 drivers/spi/spi-davinci.c                      |   4 +-
 drivers/usb/gadget/function/f_fs.c             |   8 +-
 drivers/vfio/vfio_iommu_spapr_tce.c            |   4 +
 drivers/watchdog/bcm_kona_wdt.c                |   3 +-
 drivers/xen/swiotlb-xen.c                      |   5 +-
 fs/binfmt_elf.c                                |   1 +
 fs/btrfs/inode.c                               |  13 +-
 fs/coredump.c                                  |  18 ++
 fs/nfs/nfs4proc.c                              |   2 -
 fs/ocfs2/cluster/heartbeat.c                   |   8 +-
 include/linux/coredump.h                       |   1 +
 include/net/xfrm.h                             |  10 -
 kernel/panic.c                                 |   2 +-
 kernel/sched/loadavg.c                         |   4 +-
 kernel/sysctl.c                                |   2 +-
 lib/swiotlb.c                                  |   6 +-
 mm/huge_memory.c                               |   6 +
 mm/swap_cgroup.c                               |   2 +
 net/8021q/vlan.c                               |   3 +-
 net/caif/cfpkt_skbuff.c                        |   6 +-
 net/core/dev.c                                 |   3 +-
 net/core/dst.c                                 |  14 ++
 net/core/rtnetlink.c                           |   5 +-
 net/decnet/dn_route.c                          |  14 +-
 net/decnet/netfilter/dn_rtmsg.c                |   4 +-
 net/dsa/slave.c                                |   6 +-
 net/ipv4/igmp.c                                |  22 ++-
 net/ipv6/addrconf.c                            |   6 +-
 net/ipv6/fib6_rules.c                          |  22 +--
 net/ipv6/ip6_fib.c                             |   3 +-
 net/ipv6/ip6_output.c                          |   6 +-
 net/key/af_key.c                               |  17 +-
 net/mac80211/main.c                            |  13 +-
 net/netfilter/nf_conntrack_netlink.c           |   4 +
 net/netfilter/xt_TCPMSS.c                      |   6 +-
 net/sctp/debug.c                               |   2 +-
 net/sctp/socket.c                              |   2 +-
 net/unix/af_unix.c                             |   7 +-
 net/xfrm/xfrm_policy.c                         |  47 -----
 sound/pci/hda/hda_codec.h                      |   2 +
 sound/pci/hda/hda_controller.c                 |   8 +-
 sound/pci/hda/hda_generic.c                    |   1 +
 tools/perf/util/probe-finder.c                 |  10 +-
 99 files changed, 703 insertions(+), 456 deletions(-)