This is the start of the stable review cycle for the 4.4.76 release. There are 101 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Jul 5 13:32:59 UTC 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.76-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.4.76-rc1 Wanpeng Li <wanpeng.li@xxxxxxxxxxx> KVM: nVMX: Fix exception injection Radim Krčmář <rkrcmar@xxxxxxxxxx> KVM: x86: zero base3 of unusable segments Radim Krčmář <rkrcmar@xxxxxxxxxx> KVM: x86/vPMU: fix undefined shift in intel_pmu_refresh() Ladi Prosek <lprosek@xxxxxxxxxx> KVM: x86: fix emulation of RSM and IRET instructions Dan Carpenter <dan.carpenter@xxxxxxxxxx> cpufreq: s3c2416: double free on driver init error path Pan Bian <bianpan2016@xxxxxxx> iommu/amd: Fix incorrect error handling in amd_iommu_bind_pasid() Robin Murphy <robin.murphy@xxxxxxx> iommu: Handle default domain attach failure David Dillow <dillow@xxxxxxxxxx> iommu/vt-d: Don't over-free page table directories Junxiao Bi <junxiao.bi@xxxxxxxxxx> ocfs2: o2hb: revert hb threshold to keep compatible Andy Lutomirski <luto@xxxxxxxxxx> x86/mm: Fix flush_tlb_page() on Xen Joerg Roedel <jroedel@xxxxxxx> x86/mpx: Correctly report do_mpx_bt_fault() failures to user-space Doug Berger <opendmb@xxxxxxxxx> ARM: 8685/1: ensure memblock-limit is pmd-aligned Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx> ARM64/ACPI: Fix BAD_MADT_GICC_ENTRY() macro implementation Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx> sched/loadavg: Avoid loadavg spikes caused by delayed NO_HZ accounting Eric Anholt <eric@xxxxxxxxxx> watchdog: bcm281xx: Fix use of uninitialized spinlock. Dan Carpenter <dan.carpenter@xxxxxxxxxx> xfrm: Oops on error in pfkey_msg2xfrm_state() Dan Carpenter <dan.carpenter@xxxxxxxxxx> xfrm: NULL dereference on allocation failure Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICY Gleb Fotengauer-Malinovskiy <glebfm@xxxxxxxxxxxx> jump label: fix passing kbuild_cflags when checking for asm goto support Eugeniu Rosca <erosca@xxxxxxxxxxxxxx> ravb: Fix use-after-free on `ifconfig eth0 down` Xin Long <lucien.xin@xxxxxxxxx> sctp: check af before verify address in sctp_addr_id2transport Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx> net/mlx4_core: Eliminate warning messages for SRQ_LIMIT under SRIOV Masami Hiramatsu <mhiramat@xxxxxxxxxx> perf probe: Fix to show correct locations for events on modules Ivan Vecera <cera@xxxxxxx> be2net: fix status check in be_cmd_pmac_add() Heiko Carstens <heiko.carstens@xxxxxxxxxx> s390/ctl_reg: make __ctl_load a full memory barrier Nikita Yushchenko <nikita.yoush@xxxxxxxxxxxxxxxxxx> swiotlb: ensure that page-sized mappings are page-aligned Dave Kleikamp <dave.kleikamp@xxxxxxxxxx> coredump: Ensure proper size of sparse core files Tobias Klauser <tklauser@xxxxxxxxxx> x86/mpx: Use compatible types in comparison to fix sparse error Felix Fietkau <nbd@xxxxxxxx> mac80211: initialize SMPS field in HT capabilities Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx> arm64: assembler: make adr_l work in modules under KASLR Kevin Hilman <khilman@xxxxxxxxxxxx> spi: davinci: use dma_mapping_error() Roberto Sassu <rsassu@xxxxxxx> scsi: lpfc: avoid double free of resource identifiers Brendan McGrath <redmcg@xxxxxxxxxxxxxxxxxxx> HID: i2c-hid: Add sleep between POWER ON and RESET Jiri Slaby <jslaby@xxxxxxx> kernel/panic.c: add missing \n Thomas Huth <thuth@xxxxxxxxxx> ibmveth: Add a proper check for the availability of the checksum features Balakrishnan Raman <ramanb@xxxxxxxxxxxxxxxxxxx> vxlan: do not age static remote mac entries Michael S. Tsirkin <mst@xxxxxxxxxx> virtio_net: fix PAGE_SIZE > 64k Greg Kurz <groug@xxxxxxxx> vfio/spapr: fail tce_iommu_attach_group() when iommu_data is null Ding Pixel <pding@xxxxxxx> drm/amdgpu: check ring being ready before using Florian Fainelli <f.fainelli@xxxxxxxxx> net: dsa: Check return value of phy_connect_direct() Lendacky, Thomas <Thomas.Lendacky@xxxxxxx> amd-xgbe: Check xgbe_init() return code Zach Ploskey <zach@xxxxxxxxxxx> platform/x86: ideapad-laptop: handle ACPI event 1 Eric Farman <farman@xxxxxxxxxxxxxxxxxx> scsi: virtio_scsi: Reject commands when virtqueue is broken Vineeth Remanan Pillai <vineethp@xxxxxxxxxx> xen-netfront: Fix Rx stall during network stress and OOM Colin Ian King <colin.king@xxxxxxxxxxxxx> net: sctp: fix array overrun read on sctp_timer_tbl Stefano Stabellini <sstabellini@xxxxxxxxxx> swiotlb-xen: update dev_addr after swapping pages G. Campana <gcampana@xxxxxxxxxxxxx> virtio_console: fix a crash in config_work_handler Liu Bo <bo.li.liu@xxxxxxxxxx> Btrfs: fix truncate down when no_holes feature is enabled Eric Dumazet <edumazet@xxxxxxxxxx> gianfar: Do not reuse pages from emergency reserve Gavin Shan <gwshan@xxxxxxxxxxxxxxxxxx> powerpc/eeh: Enable IO path on permanent error Florian Fainelli <f.fainelli@xxxxxxxxx> net: bgmac: Remove superflous netif_carrier_on() Florian Fainelli <f.fainelli@xxxxxxxxx> net: bgmac: Start transmit queue in bgmac_open Florian Fainelli <f.fainelli@xxxxxxxxx> net: bgmac: Fix SOF bit checking David S. Miller <davem@xxxxxxxxxxxxx> bgmac: Fix reversed test of build_skb() return value. Rafał Miłecki <zajec5@xxxxxxxxx> mtd: bcm47xxpart: don't fail because of bit-flips wangweidong <wangweidong1@xxxxxxxxxx> bgmac: fix a missing check for build_skb Rafał Miłecki <zajec5@xxxxxxxxx> mtd: bcm47xxpart: limit scanned flash area on BCM47XX (MIPS) only Álvaro Fernández Rojas <noltari@xxxxxxxxx> MIPS: ralink: fix MT7628 wled_an pinmux gpio Álvaro Fernández Rojas <noltari@xxxxxxxxx> MIPS: ralink: fix MT7628 pinmux typos John Crispin <blogic@xxxxxxxxxxx> MIPS: ralink: Fix invalid assignment of SoC type John Crispin <blogic@xxxxxxxxxxx> MIPS: ralink: fix USB frequency scaling John Crispin <blogic@xxxxxxxxxxx> MIPS: ralink: MT7688 pinmux fixes Florian Fainelli <f.fainelli@xxxxxxxxx> net: korina: Fix NAPI versus resources freeing Felix Fietkau <nbd@xxxxxxxx> MIPS: ath79: fix regression in PCI window initialization Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx> net: mvneta: Fix for_each_present_cpu usage Jon Mason <jon.mason@xxxxxxxxxxxx> ARM: dts: BCM5301X: Correct GIC_PPI interrupt flags Quinn Tran <quinn.tran@xxxxxxxxxx> qla2xxx: Fix erroneous invalid handle message Johannes Thumshirn <jthumshirn@xxxxxxx> scsi: lpfc: Set elsiocb contexts to NULL after freeing it Damien Le Moal <damien.lemoal@xxxxxxx> scsi: sd: Fix wrong DPOFUA disable in sd_read_cache_type Dmitry Vyukov <dvyukov@xxxxxxxxxx> KVM: x86: fix fixing of hypercalls Mark Rutland <mark.rutland@xxxxxxx> mm: numa: avoid waiting on freed migrated pages Roman Pen <roman.penyaev@xxxxxxxxxxxxxxxx> block: fix module reference leak on put_disk() call for cgroups throttle Kees Cook <keescook@xxxxxxxxxxxx> sysctl: enable strict writes Baolin Wang <baolin.wang@xxxxxxxxxx> usb: gadget: f_fs: Fix possibe deadlock Deepak Rawat <drawat@xxxxxxxxxx> drm/vmwgfx: Free hash table allocated by cmdbuf managed res mgr Hui Wang <hui.wang@xxxxxxxxxxxxx> ALSA: hda - set input_path bitmap to zero after moving it to new place Takashi Iwai <tiwai@xxxxxxx> ALSA: hda - Fix endless loop of codec configure Paul Burton <paul.burton@xxxxxxxxxx> MIPS: Fix IRQ tracing & lockdep when rescheduling Paul Burton <paul.burton@xxxxxxxxxx> MIPS: pm-cps: Drop manual cache-line alignment of ready_count James Hogan <james.hogan@xxxxxxxxxx> MIPS: Avoid accidental raw backtrace David Rientjes <rientjes@xxxxxxxxxx> mm, swap_cgroup: reschedule when neeed in swap_cgroup_swapoff() Russell Currey <ruscur@xxxxxxxxxx> drm/ast: Handle configuration without P2A bridge Kinglong Mee <kinglongmee@xxxxxxxxx> NFSv4: fix a reference leak caused WARNING messages Eric Leblond <eric@xxxxxxxxx> netfilter: synproxy: fix conntrackd interaction Eric Dumazet <edumazet@xxxxxxxxxx> netfilter: xt_TCPMSS: add more sanity tests on tcph->doff Serhey Popovych <serhe.popovych@xxxxxxxxx> rtnetlink: add IFLA_GROUP to ifla_policy Serhey Popovych <serhe.popovych@xxxxxxxxx> ipv6: Do not leak throw route references Bert Kenward <bkenward@xxxxxxxxxxxxxx> sfc: provide dummy definitions of vswitch functions Gao Feng <gfree.wind@xxxxxxxxxxx> net: 8021q: Fix one possible panic caused by BUG_ON in free_netdev Wei Wang <weiwan@xxxxxxxxxx> decnet: always not take dst->__refcnt when inserting dst into hash table Eli Cohen <eli@xxxxxxxxxxxx> net/mlx5: Wait for FW readiness before initializing command interface Xin Long <lucien.xin@xxxxxxxxx> ipv6: fix calling in6_ifa_hold incorrectly for dad work WANG Cong <xiyou.wangcong@xxxxxxxxx> igmp: add a missing spin_lock_init() WANG Cong <xiyou.wangcong@xxxxxxxxx> igmp: acquire pmc lock for ip_mc_clear_src() Jia-Ju Bai <baijiaju1990@xxxxxxx> net: caif: Fix a sleep-in-atomic bug in cfpkt_create_pfx Krister Johansen <kjlx@xxxxxxxxxxxxxxxxxx> Fix an intermittent pr_emerg warning about lo becoming free. Mateusz Jurczyk <mjurczyk@xxxxxxxxxx> af_unix: Add sockaddr length checks before accessing sa_family in bind and connect handlers Mintz, Yuval <Yuval.Mintz@xxxxxxxxxx> net: Zero ifla_vf_info in rtnl_fill_vfinfo() Mateusz Jurczyk <mjurczyk@xxxxxxxxxx> decnet: dn_rtmsg: Improve input length sanitization in dnrmg_receive_user_skb Alexander Potapenko <glider@xxxxxxxxxx> net: don't call strlen on non-terminated string in dev_set_alias() Willem de Bruijn <willemb@xxxxxxxxxx> ipv6: release dst on error in ip6_dst_lookup_tail ------------- Diffstat: Documentation/sysctl/kernel.txt | 15 +- Makefile | 16 +- arch/arm/boot/dts/bcm5301x.dtsi | 4 +- arch/arm/mm/mmu.c | 8 +- arch/arm64/include/asm/acpi.h | 6 +- arch/arm64/include/asm/assembler.h | 36 +++- arch/mips/ath79/common.c | 16 +- arch/mips/kernel/entry.S | 3 + arch/mips/kernel/pm-cps.c | 9 +- arch/mips/kernel/traps.c | 2 + arch/mips/ralink/mt7620.c | 84 +++++--- arch/mips/ralink/rt288x.c | 2 +- arch/powerpc/kernel/eeh.c | 10 +- arch/s390/include/asm/ctl_reg.h | 4 +- arch/x86/include/asm/kvm_emulate.h | 4 +- arch/x86/kvm/emulate.c | 16 +- arch/x86/kvm/pmu_intel.c | 2 +- arch/x86/kvm/vmx.c | 2 +- arch/x86/kvm/x86.c | 20 +- arch/x86/mm/mpx.c | 12 +- arch/x86/mm/tlb.c | 4 +- block/blk-cgroup.c | 9 + drivers/char/virtio_console.c | 2 +- drivers/cpufreq/s3c2416-cpufreq.c | 1 - drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 7 + drivers/gpu/drm/ast/ast_drv.h | 6 +- drivers/gpu/drm/ast/ast_main.c | 264 +++++++++++++++---------- drivers/gpu/drm/ast/ast_post.c | 7 +- drivers/gpu/drm/vmwgfx/vmwgfx_cmdbuf_res.c | 1 + drivers/hid/i2c-hid/i2c-hid.c | 9 + drivers/iommu/amd_iommu_v2.c | 2 +- drivers/iommu/intel-iommu.c | 2 +- drivers/iommu/iommu.c | 37 ++-- drivers/mtd/bcm47xxpart.c | 42 ++-- drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 4 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 4 +- drivers/net/ethernet/broadcom/bgmac.c | 13 +- drivers/net/ethernet/emulex/benet/be_cmds.c | 2 +- drivers/net/ethernet/freescale/gianfar.c | 2 +- drivers/net/ethernet/ibm/ibmveth.c | 7 +- drivers/net/ethernet/korina.c | 8 +- drivers/net/ethernet/marvell/mvneta.c | 8 +- drivers/net/ethernet/mellanox/mlx4/eq.c | 23 ++- drivers/net/ethernet/mellanox/mlx5/core/main.c | 14 +- drivers/net/ethernet/renesas/ravb_main.c | 24 +-- drivers/net/ethernet/sfc/falcon.c | 10 + drivers/net/virtio_net.c | 10 +- drivers/net/vxlan.c | 2 +- drivers/net/xen-netfront.c | 2 +- drivers/platform/x86/ideapad-laptop.c | 1 + drivers/scsi/lpfc/lpfc_els.c | 2 + drivers/scsi/lpfc/lpfc_sli.c | 7 + drivers/scsi/qla2xxx/qla_isr.c | 4 + drivers/scsi/qla2xxx/qla_target.c | 2 +- drivers/scsi/sd.c | 3 +- drivers/scsi/virtio_scsi.c | 11 +- drivers/spi/spi-davinci.c | 4 +- drivers/usb/gadget/function/f_fs.c | 8 +- drivers/vfio/vfio_iommu_spapr_tce.c | 4 + drivers/watchdog/bcm_kona_wdt.c | 3 +- drivers/xen/swiotlb-xen.c | 5 +- fs/binfmt_elf.c | 1 + fs/btrfs/inode.c | 13 +- fs/coredump.c | 18 ++ fs/nfs/nfs4proc.c | 2 - fs/ocfs2/cluster/heartbeat.c | 8 +- include/linux/coredump.h | 1 + include/net/xfrm.h | 10 - kernel/panic.c | 2 +- kernel/sched/loadavg.c | 4 +- kernel/sysctl.c | 2 +- lib/swiotlb.c | 6 +- mm/huge_memory.c | 6 + mm/swap_cgroup.c | 2 + net/8021q/vlan.c | 3 +- net/caif/cfpkt_skbuff.c | 6 +- net/core/dev.c | 3 +- net/core/dst.c | 14 ++ net/core/rtnetlink.c | 5 +- net/decnet/dn_route.c | 14 +- net/decnet/netfilter/dn_rtmsg.c | 4 +- net/dsa/slave.c | 6 +- net/ipv4/igmp.c | 22 ++- net/ipv6/addrconf.c | 6 +- net/ipv6/fib6_rules.c | 22 +-- net/ipv6/ip6_fib.c | 3 +- net/ipv6/ip6_output.c | 6 +- net/key/af_key.c | 17 +- net/mac80211/main.c | 13 +- net/netfilter/nf_conntrack_netlink.c | 4 + net/netfilter/xt_TCPMSS.c | 6 +- net/sctp/debug.c | 2 +- net/sctp/socket.c | 2 +- net/unix/af_unix.c | 7 +- net/xfrm/xfrm_policy.c | 47 ----- sound/pci/hda/hda_codec.h | 2 + sound/pci/hda/hda_controller.c | 8 +- sound/pci/hda/hda_generic.c | 1 + tools/perf/util/probe-finder.c | 10 +- 99 files changed, 703 insertions(+), 456 deletions(-)