4.4.70-stable review

This is the start of the stable review cycle for the 4.4.70 release. There are 103 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu May 25 20:08:25 UTC 2017. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.70-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.4.70-rc1

Julius Werner <[email protected]>
drivers: char: mem: Check for address space wraparound with mmap()

J. Bruce Fields <[email protected]>
nfsd: encoders mustn't use unitialized values in error cases

Mario Kleiner <[email protected]>
drm/edid: Add 10 bpc quirk for LGD 764 panel in HP zBook 17 G2

Lukas Wunner <[email protected]>
PCI: Freeze PME scan before suspending devices

David Woodhouse <[email protected]>
PCI: Fix pci_mmap_fits() for HAVE_PCI_RESOURCE_TO_USER platforms

Thomas Gleixner <[email protected]>
tracing/kprobes: Enforce kprobes teardown after testing

Al Viro <[email protected]>
osf_wait4(): fix infoleak

Thomas Gleixner <[email protected]>
genirq: Fix chained interrupt data ordering

Johan Hovold <[email protected]>
uwb: fix device quirk on big-endian hosts

Daniel Micay <[email protected]>
stackprotector: Increase the per-task stack canary's random range from 32 bits to 64 bits on 64-bit platforms

James Hogan <[email protected]>
metag/uaccess: Check access_ok in strncpy_from_user

James Hogan <[email protected]>
metag/uaccess: Fix access_ok()

KarimAllah Ahmed <[email protected]>
iommu/vt-d: Flush the IOTLB to get rid of the initial kdump mappings

Malcolm Priestley <[email protected]>
staging: rtl8192e: rtl92e_get_eeprom_size Fix read size of EPROM_CMD.

Malcolm Priestley <[email protected]>
staging: rtl8192e: fix 2 byte alignment of register BSSIDR.

Keno Fischer <[email protected]>
mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp

Takashi Iwai <[email protected]>
xc2028: Fix use-after-free bug properly

Kristina Martsenko <[email protected]>
arm64: documentation: document tagged pointer stack constraints

Mark Rutland <[email protected]>
arm64: uaccess: ensure extension of access_ok() addr

Mark Rutland <[email protected]>
arm64: xchg: hazard against entire exchange variable

Ludovic Desroches <[email protected]>
ARM: dts: at91: sama5d3_xplained: not all ADC channels are available

Ludovic Desroches <[email protected]>
ARM: dts: at91: sama5d3_xplained: fix ADC vref

LiuHailong <[email protected]>
powerpc/64e: Fix hang when debugging programs with relocated kernel

Tyrel Datwyler <[email protected]>
powerpc/pseries: Fix of_node_put() underflow during DLPAR remove

Mahesh Salgaonkar <[email protected]>
powerpc/book3s/mce: Move add_taint() later in virtual mode

Johan Hovold <[email protected]>
cx231xx-cards: fix NULL-deref at probe

Johan Hovold <[email protected]>
cx231xx-audio: fix NULL-deref at probe

Johan Hovold <[email protected]>
cx231xx-audio: fix init error path

Daniel Scheller <[email protected]>
dvb-frontends/cxd2841er: define symbol_rate_min/max in T/C fe-ops

Alyssa Milburn <[email protected]>
zr364xx: enforce minimum size when reading header

Johan Hovold <[email protected]>
dib0700: fix NULL-deref at probe

Marek Szyprowski <[email protected]>
s5p-mfc: Fix unbalanced call to clock management

Johan Hovold <[email protected]>
gspca: konica: add missing endpoint sanity check

Yan, Zheng <[email protected]>
ceph: fix recursion between ceph_set_acl() and __ceph_setattr()

Matt Ranostay <[email protected]>

    iio: proximity: as3935: fix as3935_write

Dan Carpenter <[email protected]>
ipx: call ipxitf_put() in ioctl error path

Peter Hurley <[email protected]>
tty: Prevent ldisc drivers from re-using stale tty fields

Johan Hovold <[email protected]>
USB: hub: fix non-SS hub-descriptor handling

Johan Hovold <[email protected]>
USB: hub: fix SS hub-descriptor handling

Johan Hovold <[email protected]>
USB: serial: io_ti: fix div-by-zero in set_termios

Johan Hovold <[email protected]>
USB: serial: mct_u232: fix big-endian baud-rate handling

Bjørn Mork <[email protected]>
USB: serial: qcserial: add more Lenovo EM74xx device IDs

Daniele Palmas <[email protected]>
usb: serial: option: add Telit ME910 support

Johan Hovold <[email protected]>
USB: iowarrior: fix info ioctl on big-endian hosts

Peter Ujfalusi <[email protected]>
usb: musb: tusb6010_omap: Do not reset the other direction's packet size

Alyssa Milburn <[email protected]>
ttusb2: limit messages to buffer size

Johan Hovold <[email protected]>
mceusb: fix NULL-deref at probe

Johan Hovold <[email protected]>
usbvision: fix NULL-deref at probe

Johan Hovold <[email protected]>
net: irda: irda-usb: fix firmware name on big-endian hosts

Peter Chen <[email protected]>
usb: host: xhci-mem: allocate zeroed Scratchpad Buffer

Mathias Nyman <[email protected]>
xhci: apply PME_STUCK_QUIRK and MISSING_CAS quirk for Denverton

Thomas Petazzoni <[email protected]>
usb: host: xhci-plat: propagate return value of platform_get_irq()

Konstantin Khlebnikov <[email protected]>
sched/fair: Initialize throttle_count for new task-groups lazily

Konstantin Khlebnikov <[email protected]>
sched/fair: Do not announce throttled next buddy in dequeue_task_fair()

Eric Biggers <[email protected]>
fscrypt: avoid collisions when presenting long encrypted filenames

Jaegeuk Kim <[email protected]>
f2fs: check entire encrypted bigname when finding a dentry

Eric Biggers <[email protected]>
fscrypt: fix context consistency check when key(s) unavailable

Kristian Evensen <[email protected]>
net: qmi_wwan: Add SIMCom 7230E

Dan Carpenter <[email protected]>
ext4 crypto: fix some error handling

Theodore Ts'o <[email protected]>
ext4 crypto: don't let data integrity writebacks fail with ENOMEM

Andrey Korolyov <[email protected]>
USB: serial: ftdi_sio: add Olimex ARM-USB-TINY(H) PIDs

Anthony Mallet <[email protected]>
USB: serial: ftdi_sio: fix setting latency for unprivileged users

Kirill Tkhai <[email protected]>
pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes()

Eric W. Biederman <[email protected]>
pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes

Pavel Roskin <[email protected]>
iio: dac: ad7303: fix channel description

Rob Herring <[email protected]>
of: fix sparse warning in of_pci_range_parser_one

Takashi Iwai <[email protected]>
proc: Fix unbalanced hard link numbers

Tobias Herzog <[email protected]>
cdc-acm: fix possible invalid access when processing notification

Ben Skeggs <[email protected]>
drm/nouveau/tmr: handle races with hw when updating the next alarm time

Ben Skeggs <[email protected]>
drm/nouveau/tmr: avoid processing completed alarms when adding a new one

Ben Skeggs <[email protected]>
drm/nouveau/tmr: fix corruption of the pending list when rescheduling an alarm

Ben Skeggs <[email protected]>
drm/nouveau/tmr: ack interrupt before processing alarms

Ben Skeggs <[email protected]>
drm/nouveau/therm: remove ineffective workarounds for alarm bugs

Mario Kleiner <[email protected]>
drm/amdgpu: Make display watermark calculations more accurate

Mario Kleiner <[email protected]>
drm/amdgpu: Avoid overflows/divide-by-zero in latency_watermark calculations.

Johan Hovold <[email protected]>
ath9k_htc: fix NULL-deref at probe

Dmitry Tunin <[email protected]>
ath9k_htc: Add support of AirTies 1eda:2315 AR9271 device

Martin Schwidefsky <[email protected]>
s390/cputime: fix incorrect system time

Michael Holzheu <[email protected]>
s390/kdump: Add final note

Richard Cochran <[email protected]>
regulator: tps65023: Fix inverted core enable logic.

Wanpeng Li <[email protected]>
KVM: X86: Fix read out-of-bounds vulnerability in kvm pio emulation

Wanpeng Li <[email protected]>
KVM: x86: Fix load damaged SSEx MXCSR register

Daniel Glöckner <[email protected]>
ima: accept previously set IMA_NEW_FILE

Brian Norris <[email protected]>
mwifiex: pcie: fix cmd_buf use-after-free in remove/reset

Larry Finger <[email protected]>
rtlwifi: rtl8821ae: setup 8812ae RFE according to device type

Dennis Yang <[email protected]>
md: update slab_cache before releasing new stripes when stripes resizing

Joe Thornber <[email protected]>
dm space map disk: fix some book keeping in the disk space map

Joe Thornber <[email protected]>
dm thin metadata: call precommit before saving the roots

Mikulas Patocka <[email protected]>
dm bufio: make the parameter "retain_bytes" unsigned long

Mike Snitzer <[email protected]>
dm cache metadata: fail operations if fail_io mode has been established

Mikulas Patocka <[email protected]>
dm bufio: check new buffer allocation watermark every 30 seconds

Mikulas Patocka <[email protected]>
dm bufio: avoid a possible ABBA deadlock

Mikulas Patocka <[email protected]>
dm raid: select the Kconfig option CONFIG_MD_RAID0

Vinothkumar Raja <[email protected]>
dm btree: fix for dm_btree_find_lowest_key()

Paolo Abeni <[email protected]>
infiniband: call ipv6 route lookup via the stub interface

Jerry Snitselaar <[email protected]>
tpm_crb: check for bad response size

Marc Dietrich <[email protected]>
ARM: tegra: paz00: Mark panel regulator as enabled on boot

Vamsi Krishna Samavedam <[email protected]>
USB: core: replace %p with %pK

Willy Tarreau <[email protected]>
char: lp: fix possible integer overflow in lp_setup()

Johan Hovold <[email protected]>
watchdog: pcwd_usb: fix NULL-deref at probe

Alan Stern <[email protected]>
USB: ene_usb6250: fix DMA to the stack

Maksim Salau <[email protected]>
usb: misc: legousbtower: Fix memory leak

Maksim Salau <[email protected]>
usb: misc: legousbtower: Fix buffers on stack

-------------

Diffstat:

 Documentation/arm64/tagged-pointers.txt            |  62 ++++++++---
 Makefile                                           |   4 +-
 arch/alpha/kernel/osf_sys.c                        |   6 +-
 arch/arm/boot/dts/at91-sama5d3_xplained.dts        |   5 +-
 arch/arm/boot/dts/tegra20-paz00.dts                |   1 +
 arch/arm64/include/asm/cmpxchg.h                   |   2 +-
 arch/arm64/include/asm/uaccess.h                   |   3 +-
 arch/metag/include/asm/uaccess.h                   |  49 ++++++---
 arch/powerpc/kernel/exceptions-64e.S               |  12 ++
 arch/powerpc/kernel/mce.c                          |   2 +
 arch/powerpc/kernel/traps.c                        |   4 +-
 arch/powerpc/platforms/pseries/dlpar.c             |   1 -
 arch/s390/kernel/crash_dump.c                      |  15 +++
 arch/s390/kernel/entry.S                           |  21 +++-
 arch/x86/kernel/fpu/init.c                         |   1 +
 arch/x86/kvm/x86.c                                 |  33 ++++--
 drivers/char/lp.c                                  |   6 +-
 drivers/char/mem.c                                 |   5 +
 drivers/char/tpm/tpm_crb.c                         |   3 +-
 drivers/gpu/drm/amd/amdgpu/dce_v10_0.c             |  29 ++---
 drivers/gpu/drm/amd/amdgpu/dce_v11_0.c             |  29 ++---
 drivers/gpu/drm/amd/amdgpu/dce_v8_0.c              |  29 ++---
 drivers/gpu/drm/drm_edid.c                         |   8 ++
 drivers/gpu/drm/nouveau/nvkm/subdev/therm/base.c   |   2 +-
 drivers/gpu/drm/nouveau/nvkm/subdev/therm/fan.c    |   2 +-
 drivers/gpu/drm/nouveau/nvkm/subdev/therm/fantog.c |   2 +-
 drivers/gpu/drm/nouveau/nvkm/subdev/therm/temp.c   |   2 +-
 drivers/gpu/drm/nouveau/nvkm/subdev/timer/base.c   |  59 ++++++----
 drivers/gpu/drm/nouveau/nvkm/subdev/timer/nv04.c   |   2 +-
 drivers/iio/dac/ad7303.c                           |   6 +-
 drivers/iio/proximity/as3935.c                     |   3 +-
 drivers/infiniband/core/addr.c                     |   4 +-
 drivers/iommu/intel-iommu.c                        |   5 +-
 drivers/md/Kconfig                                 |   1 +
 drivers/md/dm-bufio.c                              |  35 ++++--
 drivers/md/dm-cache-metadata.c                     |  12 +-
 drivers/md/dm-thin-metadata.c                      |   4 +-
 drivers/md/persistent-data/dm-btree.c              |   8 +-
 drivers/md/persistent-data/dm-space-map-disk.c     |  15 ++-
 drivers/md/raid5.c                                 |   6 +-
 drivers/media/dvb-frontends/cxd2841er.c            |   4 +-
 drivers/media/platform/s5p-mfc/s5p_mfc.c           |   1 +
 drivers/media/rc/mceusb.c                          |   4 +-
 drivers/media/tuners/tuner-xc2028.c                |  37 +++----
 drivers/media/usb/cx231xx/cx231xx-audio.c          |  42 ++++---
 drivers/media/usb/cx231xx/cx231xx-cards.c          |  45 +++++++-
 drivers/media/usb/dvb-usb/dib0700_core.c           |   3 +
 drivers/media/usb/dvb-usb/ttusb2.c                 |  19 ++++
 drivers/media/usb/gspca/konica.c                   |   3 +
 drivers/media/usb/usbvision/usbvision-video.c      |   9 +-
 drivers/media/usb/zr364xx/zr364xx.c                |   8 ++
 drivers/net/irda/irda-usb.c                        |   2 +-
 drivers/net/usb/qmi_wwan.c                         |   1 +
 drivers/net/wireless/ath/ath9k/hif_usb.c           |   4 +
 drivers/net/wireless/mwifiex/pcie.c                |   7 ++
 .../net/wireless/realtek/rtlwifi/rtl8821ae/phy.c   | 122 ++++++++++++++++++---
 .../net/wireless/realtek/rtlwifi/rtl8821ae/reg.h   |   1 +
 drivers/of/address.c                               |   2 +-
 drivers/pci/pci-sysfs.c                            |  10 +-
 drivers/pci/pci.c                                  |   9 +-
 drivers/regulator/tps65023-regulator.c             |   3 +-
 drivers/staging/rtl8192e/rtl8192e/r8192E_dev.c     |  11 +-
 drivers/tty/tty_ldisc.c                            |   7 ++
 drivers/usb/class/cdc-acm.c                        |  13 ++-
 drivers/usb/core/devio.c                           |   4 +-
 drivers/usb/core/hcd.c                             |   4 +-
 drivers/usb/core/hub.c                             |  19 +++-
 drivers/usb/core/urb.c                             |   2 +-
 drivers/usb/host/xhci-mem.c                        |   2 +-
 drivers/usb/host/xhci-pci.c                        |   7 +-
 drivers/usb/host/xhci-plat.c                       |   2 +-
 drivers/usb/misc/iowarrior.c                       |   2 +-
 drivers/usb/misc/legousbtower.c                    |  38 +++++--
 drivers/usb/musb/tusb6010_omap.c                   |  13 ++-
 drivers/usb/serial/ftdi_sio.c                      |  10 +-
 drivers/usb/serial/ftdi_sio_ids.h                  |   2 +
 drivers/usb/serial/io_ti.c                         |   5 +-
 drivers/usb/serial/mct_u232.c                      |   2 +-
 drivers/usb/serial/option.c                        |   8 ++
 drivers/usb/serial/qcserial.c                      |   2 +
 drivers/usb/storage/ene_ub6250.c                   |  90 +++++++++------
 drivers/uwb/i1480/dfu/usb.c                        |   5 +-
 drivers/watchdog/pcwd_usb.c                        |   3 +
 fs/ceph/acl.c                                      |   4 +-
 fs/ceph/inode.c                                    |  27 +++--
 fs/ceph/super.h                                    |   1 +
 fs/ext4/crypto.c                                   |  37 ++++---
 fs/ext4/crypto_fname.c                             |   2 +-
 fs/ext4/crypto_policy.c                            |  66 ++++++++---
 fs/ext4/ext4.h                                     |   6 +-
 fs/ext4/namei.c                                    |   4 +-
 fs/ext4/page-io.c                                  |  14 ++-
 fs/ext4/readpage.c                                 |   2 +-
 fs/f2fs/crypto_fname.c                             |   2 +-
 fs/f2fs/crypto_policy.c                            |  65 ++++++++---
 fs/f2fs/dir.c                                      |  32 ++++--
 fs/f2fs/f2fs.h                                     |   3 +-
 fs/f2fs/hash.c                                     |   7 +-
 fs/f2fs/inline.c                                   |   4 +-
 fs/nfsd/nfs4xdr.c                                  |   8 +-
 fs/proc/generic.c                                  |   1 +
 include/linux/kprobes.h                            |   4 +-
 kernel/fork.c                                      |  10 +-
 kernel/irq/chip.c                                  |   2 +-
 kernel/kprobes.c                                   |   2 +-
 kernel/pid_namespace.c                             |   2 +-
 kernel/sched/fair.c                                |  29 ++++-
 kernel/sched/sched.h                               |   2 +-
 kernel/trace/trace_kprobe.c                        |   5 +
 mm/huge_memory.c                                   |  12 +-
 net/ipx/af_ipx.c                                   |   5 +-
 security/integrity/ima/ima_appraise.c              |   5 +-
 112 files changed, 1005 insertions(+), 443 deletions(-)