4.4.106-stable review

This is the start of the stable review cycle for the 4.4.106 release. There are 105 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sun Dec 17 09:22:39 UTC 2017. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.106-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.4.106-rc1

Vincent Pelletier <[email protected]>
usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping

Marc Zyngier <[email protected]>
arm: KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one

Greg Kroah-Hartman <[email protected]>

    Revert "x86/mm/pat: Ensure cpa->pfn only contains page frame numbers"

Greg Kroah-Hartman <[email protected]>
Revert "x86/efi: Hoist page table switching code into efi_call_virt()"

Greg Kroah-Hartman <[email protected]>
Revert "x86/efi: Build our own page table structures"

Eric Dumazet <[email protected]>
net/packet: fix a race in packet_bind() and packet_notifier()

Mike Maloney <[email protected]>
packet: fix crash in fanout_demux_rollover()

Hangbin Liu <[email protected]>
sit: update frag_off info

Håkon Bugge <[email protected]>
rds: Fix NULL pointer dereference in __rds_rdma_map

Jon Maloy <[email protected]>
tipc: fix memory leak in tipc_accept_from_sock()

Al Viro <[email protected]>
more bio_map_user_iov() leak fixes

Heiko Carstens <[email protected]>
s390: always save and restore all registers on context switch

Masamitsu Yamazaki <[email protected]>
ipmi: Stop timers before cleaning up the module

Paul Moore <[email protected]>
audit: ensure that 'audit=1' actually enables audit for PID 1

Keefe Liu <[email protected]>
ipvlan: fix ipv6 outbound device

David Howells <[email protected]>
afs: Connect up the CB.ProbeUuid

Majd Dibbiny <[email protected]>
IB/mlx5: Assign send CQ and recv CQ of UMR QP

Mark Bloch <[email protected]>
IB/mlx4: Increase maximal message size under UD QP

Herbert Xu <[email protected]>
xfrm: Copy policy family in clone_policy

Jason Baron <[email protected]>
jump_label: Invoke jump_label_test() via early_initcall()

Arvind Yadav <[email protected]>
atm: horizon: Fix irq release error

Xin Long <[email protected]>
sctp: use the right sk after waking up from wait_buf sleep

Xin Long <[email protected]>
sctp: do not free asoc when it is already dead in sctp_sendmsg

Pavel Tatashin <[email protected]>
sparc64/mm: set fields in deferred pages

Ming Lei <[email protected]>
block: wake up all tasks blocked in get_request()

Chuck Lever <[email protected]>
sunrpc: Fix rpc_task_begin trace point

Trond Myklebust <[email protected]>
NFS: Fix a typo in nfs_rename()

Randy Dunlap <[email protected]>
dynamic-debug-howto: fix optional/omitted ending line number to be LARGE instead of 0

Stephen Bates <[email protected]>
lib/genalloc.c: make the avail variable an atomic_long_t

Xin Long <[email protected]>
route: update fnhe_expires for redirect when the fnhe exists

Xin Long <[email protected]>
route: also update fnhe_genid when updating a route cache

Ben Hutchings <[email protected]>
mac80211_hwsim: Fix memory leak in hwsim_new_radio_nl()

Masahiro Yamada <[email protected]>
kbuild: pkg: use --transform option to prefix paths in tar

Jérémy Lefaure <[email protected]>
EDAC, i5000, i5400: Fix definition of NRECMEMB register

Jérémy Lefaure <[email protected]>

    EDAC, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro

Alexey Kardashevskiy <[email protected]>
powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested

Jim Qu <[email protected]>
drm/amd/amdgpu: fix console deadlock if late init failed

Jan Kara <[email protected]>
axonram: Fix gendisk handling

Florian Westphal <[email protected]>
netfilter: don't track fragmented packets

Johannes Thumshirn <[email protected]>
zram: set physical queue limits to avoid array out of bounds accesses

Chris Brandt <[email protected]>
i2c: riic: fix restart condition

Krzysztof Kozlowski <[email protected]>
crypto: s5p-sss - Fix completing crypto request in IRQ handler

WANG Cong <[email protected]>
ipv6: reorder icmpv6_init() and ip6_mr_init()

Michal Schmidt <[email protected]>
bnx2x: do not rollback VF MAC/VLAN filters we did not configure

Michal Schmidt <[email protected]>
bnx2x: fix possible overrun of VFPF multicast addresses array

Michal Schmidt <[email protected]>
bnx2x: prevent crash when accessing PTP with interface down

Blomme, Maarten <[email protected]>

    spi_ks8995: fix "BUG: key accdaa28 not in .data!"

Mark Rutland <[email protected]>
arm64: KVM: Survive unknown traps from guests

Mark Rutland <[email protected]>
arm: KVM: Survive unknown traps from guests

Wanpeng Li <[email protected]>
KVM: nVMX: reset nested_run_pending if the vCPU is going to be reset

Franck Demathieu <[email protected]>
irqchip/crossbar: Fix incorrect type of register size

James Smart <[email protected]>
scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters

Tejun Heo <[email protected]>
workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq

Tejun Heo <[email protected]>
libata: drop WARN from protocol error in ata_sff_qc_issue()

Jim Mattson <[email protected]>
kvm: nVMX: VMCLEAR should not cause the vCPU to shut down

Christophe JAILLET <[email protected]>
USB: gadgetfs: Fix a potential memory leak in 'dev_config()'

John Keeping <[email protected]>
usb: gadget: configs: plug memory leak

Daniel Drake <[email protected]>
HID: chicony: Add support for another ASUS Zen AiO keyboard

Phil Reid <[email protected]>
gpio: altera: Use handle_level_irq when configured as a level_high

Guenter Roeck <[email protected]>
ARM: OMAP2+: Release device node after it is no longer needed.

Guenter Roeck <[email protected]>
ARM: OMAP2+: Fix device node reference counts

David Daney <[email protected]>
module: set __jump_table alignment to 8

Sachin Sant <[email protected]>
selftest/powerpc: Fix false failures for skipped tests

Thomas Gleixner <[email protected]>
x86/hpet: Prevent might sleep splat on resume

Ladislav Michl <[email protected]>
ARM: OMAP2+: gpmc-onenand: propagate error on initialization failure

Steffen Klassert <[email protected]>
vti6: Don't report path MTU below IPV6_MIN_MTU.

Sasha Levin <[email protected]>
Revert "s390/kbuild: enable modversions for symbols exported from asm"

Sasha Levin <[email protected]>
Revert "spi: SPI_FSL_DSPI should depend on HAS_DMA"

Sasha Levin <[email protected]>
Revert "drm/armada: Fix compile fail"

Kirill A. Shutemov <[email protected]>
mm: drop unused pmdp_huge_get_and_clear_notify()

Kirill A. Shutemov <[email protected]>
thp: fix MADV_DONTNEED vs. numa balancing race

Kirill A. Shutemov <[email protected]>
thp: reduce indentation level in change_huge_pmd()

Stephen Hemminger <[email protected]>
scsi: storvsc: Workaround for virtual DVD SCSI version

Russell King <[email protected]>
ARM: avoid faulting on qemu

Russell King <[email protected]>
ARM: BUG if jumping to usermode address in kernel mode

Dave Martin <[email protected]>
arm64: fpsimd: Prevent registers leaking from dead tasks

Andrew Honig <[email protected]>

    KVM: VMX: remove I/O port 0x80 bypass on Intel hosts

Kristina Martsenko <[email protected]>
arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one

Laurent Caumont <[email protected]>
media: dvb: i2c transfers over usb cannot be done from stack

Marek Szyprowski <[email protected]>
drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU

Dave Gordon <[email protected]>
drm: extra printk() wrapper macros

Daniel Thompson <[email protected]>
kdb: Fix handling of kallsyms_symbol_next() return value

Heiko Carstens <[email protected]>
s390: fix compat system call table

Robin Murphy <[email protected]>
iommu/vt-d: Fix scatterlist offset handling

Jaejoong Kim <[email protected]>
ALSA: usb-audio: Add check return value for usb_string()

Jaejoong Kim <[email protected]>
ALSA: usb-audio: Fix out-of-bound error

Takashi Iwai <[email protected]>
ALSA: seq: Remove spurious WARN_ON() at timer check

Robb Glasser <[email protected]>
ALSA: pcm: prevent UAF in snd_pcm_info

Rafael J. Wysocki <[email protected]>
x86/PCI: Make broadcom_postcore_init() check acpi_disabled

Eric Biggers <[email protected]>
X.509: reject invalid BIT STRING for subjectPublicKey

Eric Biggers <[email protected]>
ASN.1: check for error from ASN1_OP_END__ACT actions

Eric Biggers <[email protected]>
ASN.1: fix out-of-bounds read when parsing indefinite length item

Greg Kroah-Hartman <[email protected]>
efi: Move some sysfs files to be read-only by root

Huacai Chen <[email protected]>
scsi: libsas: align sata_device's rps_resp on a cacheline

William Breathitt Gray <[email protected]>
isa: Prevent NULL dereference in isa_bus driver callbacks

Paul Meyer <[email protected]>
hv: kvp: Avoid reading past allocated blocks from KVP file

weiping zhang <[email protected]>
virtio: release virtio index when fail to device_register

Martin Kelly <[email protected]>
can: usb_8dev: cancel urb on -EPIPE and -EPROTO

Martin Kelly <[email protected]>
can: esd_usb2: cancel urb on -EPIPE and -EPROTO

Martin Kelly <[email protected]>
can: ems_usb: cancel urb on -EPIPE and -EPROTO

Martin Kelly <[email protected]>
can: kvaser_usb: cancel urb on -EPIPE and -EPROTO

Jimmy Assarsson <[email protected]>
can: kvaser_usb: ratelimit errors if incomplete messages are received

Jimmy Assarsson <[email protected]>
can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()

Jimmy Assarsson <[email protected]>
can: kvaser_usb: free buf in error paths

Oliver Stäbler <[email protected]>
can: ti_hecc: Fix napi poll return value for repoll

-------------

Diffstat:

 Makefile                                          |   4 +-
 arch/arm/include/asm/assembler.h                  |  18 +++
 arch/arm/include/asm/kvm_arm.h                    |   4 +-
 arch/arm/kernel/entry-header.S                    |   6 +
 arch/arm/kvm/handle_exit.c                        |  19 +--
 arch/arm/mach-omap2/gpmc-onenand.c                |  10 +-
 arch/arm/mach-omap2/omap_hwmod_3xxx_data.c        |  25 ++--
 arch/arm64/include/asm/kvm_arm.h                  |   3 +-
 arch/arm64/kernel/process.c                       |   9 ++
 arch/arm64/kvm/handle_exit.c                      |  19 +--
 arch/powerpc/platforms/powernv/pci-ioda.c         |   3 +
 arch/powerpc/sysdev/axonram.c                     |   5 +-
 arch/s390/include/asm/asm-prototypes.h            |   8 --
 arch/s390/include/asm/switch_to.h                 |  19 ++-
 arch/s390/kernel/syscalls.S                       |   6 +-
 arch/sparc/mm/init_64.c                           |   9 +-
 arch/x86/include/asm/efi.h                        |  26 ----
 arch/x86/kernel/hpet.c                            |   2 +-
 arch/x86/kvm/vmx.c                                |  31 ++---
 arch/x86/mm/pageattr.c                            |  17 ++-
 arch/x86/pci/broadcom_bus.c                       |   2 +-
 arch/x86/platform/efi/efi.c                       |  39 +++---
 arch/x86/platform/efi/efi_32.c                    |   5 -
 arch/x86/platform/efi/efi_64.c                    | 137 ++++++----------------
 arch/x86/platform/efi/efi_stub_64.S               |  43 +++++++
 block/bio.c                                       |  14 ++-
 block/blk-core.c                                  |   4 +-
 crypto/asymmetric_keys/x509_cert_parser.c         |   2 +
 drivers/ata/libata-sff.c                          |   1 -
 drivers/atm/horizon.c                             |   2 +-
 drivers/base/isa.c                                |  10 +-
 drivers/block/zram/zram_drv.c                     |   2 +
 drivers/char/ipmi/ipmi_si_intf.c                  |  44 +++----
 drivers/crypto/s5p-sss.c                          |   5 +-
 drivers/edac/i5000_edac.c                         |   8 +-
 drivers/edac/i5400_edac.c                         |   9 +-
 drivers/firmware/efi/efi.c                        |   3 +-
 drivers/firmware/efi/esrt.c                       |  15 +--
 drivers/firmware/efi/runtime-map.c                |  10 +-
 drivers/gpio/gpio-altera.c                        |  26 ++--
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c        |   5 +-
 drivers/gpu/drm/armada/Makefile                   |   2 -
 drivers/gpu/drm/exynos/exynos_drm_gem.c           |   9 ++
 drivers/hid/Kconfig                               |   4 +-
 drivers/hid/hid-chicony.c                         |   1 +
 drivers/hid/hid-core.c                            |   1 +
 drivers/hid/hid-ids.h                             |   1 +
 drivers/i2c/busses/i2c-riic.c                     |   6 +-
 drivers/infiniband/hw/mlx4/qp.c                   |   2 +-
 drivers/infiniband/hw/mlx5/main.c                 |   2 +
 drivers/iommu/intel-iommu.c                       |   8 +-
 drivers/irqchip/irq-crossbar.c                    |   8 +-
 drivers/media/usb/dvb-usb/dibusb-common.c         |  16 ++-
 drivers/memory/omap-gpmc.c                        |   4 +-
 drivers/net/can/ti_hecc.c                         |   3 +
 drivers/net/can/usb/ems_usb.c                     |   2 +
 drivers/net/can/usb/esd_usb2.c                    |   2 +
 drivers/net/can/usb/kvaser_usb.c                  |  13 +-
 drivers/net/can/usb/usb_8dev.c                    |   2 +
 drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c  |  20 +++-
 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c |   8 +-
 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.h |   1 +
 drivers/net/ethernet/broadcom/bnx2x/bnx2x_vfpf.c  |  23 ++--
 drivers/net/ipvlan/ipvlan_core.c                  |   2 +-
 drivers/net/phy/spi_ks8995.c                      |   1 +
 drivers/net/wireless/mac80211_hwsim.c             |   5 +-
 drivers/scsi/lpfc/lpfc_els.c                      |  14 ++-
 drivers/scsi/storvsc_drv.c                        |  27 +++--
 drivers/spi/Kconfig                               |   1 -
 drivers/usb/gadget/configfs.c                     |   1 +
 drivers/usb/gadget/function/f_fs.c                |   2 +-
 drivers/usb/gadget/legacy/inode.c                 |   4 +-
 drivers/virtio/virtio.c                           |   2 +
 fs/afs/cmservice.c                                |   3 +
 fs/nfs/dir.c                                      |   2 +-
 include/drm/drmP.h                                |  26 +++-
 include/linux/genalloc.h                          |   3 +-
 include/linux/mmu_notifier.h                      |  13 --
 include/linux/omap-gpmc.h                         |   5 +-
 include/linux/sysfs.h                             |   6 +
 include/scsi/libsas.h                             |   2 +-
 kernel/audit.c                                    |  10 +-
 kernel/debug/kdb/kdb_io.c                         |   2 +-
 kernel/jump_label.c                               |   2 +-
 kernel/workqueue.c                                |   1 +
 lib/asn1_decoder.c                                |  49 ++++----
 lib/dynamic_debug.c                               |   4 +
 lib/genalloc.c                                    |  10 +-
 mm/huge_memory.c                                  |  82 +++++++++----
 net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c    |   4 +
 net/ipv4/netfilter/nf_nat_l3proto_ipv4.c          |   5 -
 net/ipv4/route.c                                  |  14 ++-
 net/ipv6/af_inet6.c                               |  10 +-
 net/ipv6/ip6_vti.c                                |   8 +-
 net/ipv6/sit.c                                    |   1 +
 net/packet/af_packet.c                            |  37 +++---
 net/packet/internal.h                             |   1 -
 net/rds/rdma.c                                    |   2 +-
 net/sctp/socket.c                                 |  38 ++++--
 net/sunrpc/sched.c                                |   3 +-
 net/tipc/server.c                                 |   1 +
 net/xfrm/xfrm_policy.c                            |   1 +
 scripts/module-common.lds                         |   2 +
 scripts/package/Makefile                          |   5 +-
 sound/core/pcm.c                                  |   2 +
 sound/core/seq/seq_timer.c                        |   2 +-
 sound/usb/mixer.c                                 |  13 +-
 tools/hv/hv_kvp_daemon.c                          |  70 +++--------
 tools/testing/selftests/powerpc/harness.c         |   6 +-
 109 files changed, 701 insertions(+), 570 deletions(-)