4.6.6-stable review

This is the start of the stable review cycle for the 4.6.6 release. There are 96 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed Aug 10 18:02:27 UTC 2016. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.6.6-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.6.6-rc1

Miklos Szeredi <[email protected]>
vfs: fix deadlock in file_remove_privs() on overlayfs

Scott Bauer <[email protected]>
vfs: ioctl: prevent double-fetch in dedupe ioctl

Alexander Shishkin <[email protected]>
intel_th: Fix a deadlock in modprobing

Alexander Shishkin <[email protected]>
intel_th: pci: Add Kaby Lake PCH-H support

Gregory Greenman <[email protected]>
cfg80211: handle failed skb allocation

Dmitri Epshtein <[email protected]>
net: mvneta: set real interrupt per packet for tx_done

Ilya Dryomov <[email protected]>
libceph: apply new_state before new_up_client on incrementals

Tejun Heo <[email protected]>
libata: LITE-ON CX1-JB256-HP needs lower max_sectors

Lukasz Gemborowski <[email protected]>
i2c: mux: reg: wrong condition checked for of_address_to_resource return value

Sricharan R <[email protected]>
i2c: qup: Fix wrong value of index variable

Laurent Pinchart <[email protected]>
adv7604: Don't ignore pad number in subdev DV timings pad operations

Thomas Gleixner <[email protected]>
cpu/hotplug: Keep enough storage space if SMP=n to avoid array out of bounds scribble

Alexey Dobriyan <[email protected]>
posix_cpu_timer: Exit early when process has been reaped

James Patrick-Evans <[email protected]>
media: fix airspy usb probe error path

Brian King <[email protected]>
ipr: Clear interrupt on croc/crocodile when running with LSI

Alan Stern <[email protected]>
SCSI: fix new bug in scsi_dev_info_list string matching

Bruno Prémont <[email protected]>
qla2xxx: Fix NULL pointer deref in QLA interrupt

Paul Burton <[email protected]>
irqchip/mips-gic: Match IPI IRQ domain by bus token only

Paul Burton <[email protected]>
irqchip/mips-gic: Map to VPs using HW VPNum

Vegard Nossum <[email protected]>
RDS: fix rds_tcp_init() error path

Oliver Hartkopp <[email protected]>
can: fix oops caused by wrong rtnl dellink usage

Oliver Hartkopp <[email protected]>
can: fix handling of unmodifiable configuration options fix

Thor Thayer <[email protected]>
can: c_can: Update D_CAN TX and RX functions to 32 bit - fix Altera Cyclone access

Wolfgang Grandegger <[email protected]>
can: at91_can: RX queue could get stuck at high bus load

Peter Zijlstra <[email protected]>
sched/fair: Fix effective_load() to consistently use smoothed load

Taras Kondratiuk <[email protected]>
mmc: block: fix packed command header endianness

Ville Viinikka <[email protected]>

    mmc: block: fix free of uninitialized 'idata->buf'

Omar Sandoval <[email protected]>
block: fix use-after-free in sys_ioprio_get()

Randy Dunlap <[email protected]>
init/Kconfig: keep Expert users menu together

Ursula Braun <[email protected]>
qeth: delete napi struct when removing a qeth device

Dan Carpenter <[email protected]>
platform/chrome: cros_ec_dev - double fetch bug in ioctl

Scott Mayhew <[email protected]>
lockd: unregister notifier blocks if the service fails to come up completely

Boris Brezillon <[email protected]>
clk: at91: fix clk_programmable_set_parent()

Heiko Stuebner <[email protected]>
clk: rockchip: initialize flags of clk_init_data in mmc-phase clock

Michal Suchanek <[email protected]>
spi: sun4i: fix FIFO limit

Michal Suchanek <[email protected]>
spi: sunxi: fix transfer timeout

Tomeu Vizoso <[email protected]>
spi: rockchip: Signal unfinished DMA transfers

Andrey Ulanov <[email protected]>
namespace: update event counter when umounting a deleted dentry

Colin Ian King <[email protected]>
devpts: fix null pointer dereference on failed memory allocation

Rafael J. Wysocki <[email protected]>
cpufreq: Avoid false-positive WARN_ON()s in cpufreq_update_policy()

Miklos Szeredi <[email protected]>
9p: use file_dentry()

Vegard Nossum <[email protected]>
ext4: verify extent header depth

Jeff Mahoney <[email protected]>
ecryptfs: don't allow mmap when the lower fs doesn't support it

Jeff Mahoney <[email protected]>
Revert "ecryptfs: forbid opening files without mmap handler"

Miklos Szeredi <[email protected]>
locks: use file_inode()

Rhyland Klein <[email protected]>
power_supply: power_supply_read_temp only if use_cnt > 0

Daniel Bristot de Oliveira <[email protected]>
cgroup: Disable IRQs while holding css_set_lock

Tejun Heo <[email protected]>

    cgroup: set css->id to -1 during init

Wenwei Tao <[email protected]>
cgroup: remove redundant cleanup in css_create

Alexander Shiyan <[email protected]>
pinctrl: imx: Do not treat a PIN without MUX register as an error

Tony Lindgren <[email protected]>
pinctrl: single: Fix missing flush of posted write for a wakeirq

Minfei Huang <[email protected]>
pvclock: Add CPU barriers to get correct version value

Michael Welling <[email protected]>

    Input: tsc200x - report proper input_dev name

Andrew Duggan <[email protected]>
Input: synaptics-rmi4 - fix maximum size check for F12 control register 8

Dmitry Torokhov <[email protected]>
Revert "Input: wacom_w8001 - drop use of ABS_MT_TOOL_TYPE"

Cameron Gutman <[email protected]>
Input: xpad - validate USB endpoint count during probe

Ping Cheng <[email protected]>
Input: wacom_w8001 - ignore invalid pen data packets

Ping Cheng <[email protected]>

    Input: wacom_w8001 - w8001_MAX_LENGTH should be 13

Cameron Gutman <[email protected]>
Input: xpad - fix oops when attaching an unknown Xbox One gamepad

Dmitry Torokhov <[email protected]>
Input: elantech - add more IC body types to the list

Sinclair Yeh <[email protected]>
Input: vmmouse - remove port reservation

Kangjie Lu <[email protected]>
ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt

Kangjie Lu <[email protected]>
ALSA: timer: Fix leak in events via snd_timer_user_ccallback

Kangjie Lu <[email protected]>
ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS

Bob Liu <[email protected]>
xen-blkfront: don't call talk_to_blkback when already connected to blkback

Bob Liu <[email protected]>
xen-blkfront: fix resume issues after a migration

Jan Beulich <[email protected]>
xenbus: don't bail early from xenbus_dev_request_and_reply()

Jan Beulich <[email protected]>
xenbus: don't BUG() on user mode induced condition

Bob Liu <[email protected]>
xen-blkfront: save uncompleted reqs in blkfront_resume()

Andrey Grodzovsky <[email protected]>
xen/pciback: Fix conf_space read/write overlap check.

Vineet Gupta <[email protected]>
ARC: unwind: ensure that .debug_frame is generated (vs. .eh_frame)

Alexey Brodkin <[email protected]>
arc: unwind: warn only once if DW2_UNWIND is disabled

Josh Poimboeuf <[email protected]>
sched/debug: Fix deadlock when enabling sched events

Andrey Ryabinin <[email protected]>
kernel/sysrq, watchdog, sched/core: Reset watchdog on all CPUs while processing sysrq-w

Jiri Slaby <[email protected]>
pps: do not crash when failed to register

Andrey Ryabinin <[email protected]>
radix-tree: fix radix_tree_iter_retry() for tagged iterators.

Johannes Weiner <[email protected]>
mm: memcontrol: fix cgroup creation failure after many small jobs

Hugh Dickins <[email protected]>
mm: thp: refix false positive BUG in page_move_anon_rmap()

Dmitry Vyukov <[email protected]>
vmlinux.lds: account for destructor sections

Mel Gorman <[email protected]>
mm, meminit: ensure node is online before checking whether pages are uninitialised

Mel Gorman <[email protected]>
mm, meminit: always return a valid node from early_pfn_to_nid

Mauro Carvalho Chehab <[email protected]>
uapi: export lirc.h header

David Rientjes <[email protected]>
mm, compaction: prevent VM_BUG_ON when terminating freeing scanner

Torsten Hilbrich <[email protected]>
fs/nilfs2: fix potential underflow in call to crc32_le

David Rientjes <[email protected]>
mm, compaction: abort free scanner if split fails

Lukasz Odzioba <[email protected]>
mm/swap.c: flush lru pvecs on compound page arrival

Tejun Heo <[email protected]>
memcg: css_alloc should return an ERR_PTR value on error

Tejun Heo <[email protected]>
memcg: mem_cgroup_migrate() may be called with irq disabled

Mel Gorman <[email protected]>
mm, sl[au]b: add __GFP_ATOMIC to the GFP reclaim mask

Ludovic Desroches <[email protected]>
dmaengine: at_xdmac: double FIFO flush needed to compute residue

Ludovic Desroches <[email protected]>
dmaengine: at_xdmac: fix residue corruption

Ludovic Desroches <[email protected]>
dmaengine: at_xdmac: align descriptors on 64 bits

Lukas Wunner <[email protected]>
x86/quirks: Add early quirk to reset Apple AirPort card

Lukas Wunner <[email protected]>
x86/quirks: Reintroduce scanning of secondary buses

Lukas Wunner <[email protected]>
x86/quirks: Apply nvidia_bugs quirk only on root bus

Michał Pecio <[email protected]>
USB: OHCI: Don't mark EDs as ED_OPER if scheduling fails

-------------

Diffstat:

 Makefile                                 |   4 +-
 arch/arc/Makefile                        |   2 -
 arch/arc/kernel/stacktrace.c             |   2 +-
 arch/x86/include/asm/pvclock.h           |   2 +
 arch/x86/kernel/early-quirks.c           | 105 ++++++++++++++++++---
 arch/x86/kernel/pvclock.c                |   4 +
 block/ioprio.c                           |   2 +
 drivers/ata/libata-core.c                |   6 ++
 drivers/bcma/bcma_private.h              |   2 -
 drivers/block/xen-blkfront.c             | 126 ++++++++++++-------------
 drivers/clk/at91/clk-programmable.c      |   2 +-
 drivers/clk/rockchip/clk-mmc-phase.c     |   1 +
 drivers/cpufreq/cpufreq.c                |   4 +
 drivers/dma/at_xdmac.c                   |  82 +++++++++++-----
 drivers/hwtracing/intel_th/core.c        |  35 ++++++-
 drivers/hwtracing/intel_th/intel_th.h    |   3 +
 drivers/hwtracing/intel_th/pci.c         |   5 +
 drivers/i2c/busses/i2c-qup.c             |   2 +
 drivers/i2c/muxes/i2c-mux-reg.c          |   2 +-
 drivers/input/joystick/xpad.c            |  26 ++++--
 drivers/input/mouse/elantech.c           |   8 +-
 drivers/input/mouse/vmmouse.c            |  22 +----
 drivers/input/rmi4/rmi_f12.c             |   9 +-
 drivers/input/touchscreen/tsc2004.c      |   7 +-
 drivers/input/touchscreen/tsc2005.c      |   7 +-
 drivers/input/touchscreen/tsc200x-core.c |  15 ++-
 drivers/input/touchscreen/tsc200x-core.h |   2 +-
 drivers/input/touchscreen/wacom_w8001.c  |  14 ++-
 drivers/irqchip/irq-mips-gic.c           |   4 +-
 drivers/media/i2c/adv7604.c              |  46 ++++++---
 drivers/media/usb/airspy/airspy.c        |   3 +-
 drivers/mmc/card/block.c                 |  16 ++--
 drivers/net/can/at91_can.c               |   5 +-
 drivers/net/can/c_can/c_can.c            |  38 ++++++--
 drivers/net/can/dev.c                    |   9 ++
 drivers/net/ethernet/marvell/mvneta.c    |   2 +-
 drivers/pinctrl/freescale/pinctrl-imx.c  |   4 +-
 drivers/pinctrl/pinctrl-single.c         |   3 +
 drivers/platform/chrome/cros_ec_dev.c    |   8 +-
 drivers/power/power_supply_core.c        |  27 +++---
 drivers/pps/clients/pps_parport.c        |   2 +-
 drivers/s390/net/qeth_l2_main.c          |   1 +
 drivers/s390/net/qeth_l3_main.c          |   1 +
 drivers/scsi/ipr.c                       |   1 +
 drivers/scsi/qla2xxx/qla_isr.c           |   2 +-
 drivers/scsi/scsi_devinfo.c              |  10 +-
 drivers/spi/spi-rockchip.c               |   4 +-
 drivers/spi/spi-sun4i.c                  |  23 ++++-
 drivers/spi/spi-sun6i.c                  |  10 +-
 drivers/tty/pty.c                        |   7 +-
 drivers/usb/host/ohci-q.c                |   3 +-
 drivers/xen/xen-pciback/conf_space.c     |   6 +-
 drivers/xen/xenbus/xenbus_dev_frontend.c |  14 +--
 drivers/xen/xenbus/xenbus_xs.c           |   3 -
 fs/9p/vfs_file.c                         |   6 +-
 fs/ecryptfs/file.c                       |  15 ++-
 fs/ecryptfs/kthread.c                    |  13 +--
 fs/ext4/extents.c                        |   4 +
 fs/inode.c                               |   6 +-
 fs/ioctl.c                               |   1 +
 fs/lockd/svc.c                           |  13 ++-
 fs/locks.c                               |   2 +-
 fs/namespace.c                           |   1 +
 fs/nilfs2/the_nilfs.c                    |   2 +-
 include/asm-generic/vmlinux.lds.h        |   4 +
 include/linux/bcma/bcma.h                |   1 +
 include/linux/memcontrol.h               |  25 ++---
 include/linux/radix-tree.h               |   1 +
 include/linux/rmap.h                     |   2 +-
 include/uapi/linux/Kbuild                |   1 +
 init/Kconfig                             |   1 +
 kernel/cgroup.c                          | 148 +++++++++++++++--------------
 kernel/cpu.c                             |   2 +
 kernel/sched/core.c                      |   6 +-
 kernel/sched/fair.c                      |  17 ++--
 kernel/time/posix-cpu-timers.c           |   1 +
 mm/compaction.c                          |  61 ++++++------
 mm/hugetlb.c                             |   2 +-
 mm/internal.h                            |   3 +-
 mm/memcontrol.c                          |  89 ++++++++++++++++--
 mm/memory.c                              |   3 +-
 mm/page_alloc.c                          |   6 +-
 mm/rmap.c                                |   9 +-
 mm/slab_common.c                         |   4 +-
 mm/swap.c                                |  11 +--
 net/ceph/osdmap.c                        | 156 ++++++++++++++++++++++---------
 net/rds/tcp.c                            |   5 +-
 net/wireless/util.c                      |   2 +
 sound/core/timer.c                       |   3 +
 89 files changed, 917 insertions(+), 462 deletions(-)