Linux 4.4.146
* scsi: sg: fix minor memory leak in error path
drivers/scsi/sg.c
crypto: padlock-aes - Fix Nano workaround data corruption
kvm: x86: vmx: fix vpid leak
* virtio_balloon: fix another race between migration and ballooning
drivers/virtio/virtio_balloon.c
* net: socket: fix potential spectre v1 gadget in socketcall
net/socket.c
can: ems_usb: Fix memory leak on ems_usb_disconnect()
squashfs: more metadata hardenings
squashfs: more metadata hardening
* netlink: Fix spectre v1 gadget in netlink_create()
net/netlink/af_netlink.c
* net: dsa: Do not suspend/resume closed slave_dev
net/dsa/slave.c
* inet: frag: enforce memory limits earlier
net/ipv4/inet_fragment.c
* tcp: add one more quick ack after after ECN events
net/ipv4/tcp_input.c
* tcp: refactor tcp_ecn_check_ce to remove sk type cast
net/ipv4/tcp_input.c
* tcp: do not aggressively quick ack after ECN events
net/ipv4/tcp_input.c
* tcp: add max_quickacks param to tcp_incr_quickack and tcp_enter_quickack_mode
include/net/tcp.h
net/ipv4/tcp_input.c
* tcp: do not force quickack when receiving out-of-order packets
net/ipv4/tcp_input.c
NET: stmmac: align DMA stuff to largest cache line length
xen-netfront: wait xenbus state change when load module manually
net: lan78xx: fix rx handling before first packet is send
net: fix amd-xgbe flow-control issue
* ipv4: remove BUG_ON() from fib_compute_spec_dst
net/ipv4/fib_frontend.c
ASoC: pxa: Fix module autoload for platform drivers
dmaengine: pxa_dma: remove duplicate const qualifier
* ext4: check for allocation block validity with block group locked
fs/ext4/balloc.c
fs/ext4/ialloc.c
* ext4: fix inline data updates with checksums enabled
fs/ext4/inline.c
fs/ext4/inode.c
* squashfs: be more careful about metadata corruption
fs/squashfs/squashfs_fs.h
* random: mix rdrand with entropy sent in from userspace
drivers/char/random.c
drm: Add DP PSR2 sink enable bit
media: si470x: fix __be16 annotations
scsi: megaraid_sas: Increase timeout by 1 sec for non-RAID fastpath IOs
scsi: scsi_dh: replace too broad "TP9" string with the exact models
media: omap3isp: fix unbalanced dma_iommu_mapping
* crypto: authenc - don't leak pointers to authenc keys
crypto/authenc.c
* crypto: authencesn - don't leak pointers to authenc keys
crypto/authencesn.c
* usb: hub: Don't wait for connect state at resume for powered-off ports
drivers/usb/core/hub.c
microblaze: Fix simpleImage format generation
* audit: allow not equal op for audit by executable
kernel/auditfilter.c
rsi: Fix 'invalid vdd' warning in mmc
* ipconfig: Correctly initialise ic_nameservers
net/ipv4/ipconfig.c
drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
memory: tegra: Apply interrupts mask per SoC
memory: tegra: Do not handle spurious interrupts
ALSA: hda/ca0132: fix build failure when a local macro is defined
drm/atomic: Handling the case when setting old crtc for plane
media: siano: get rid of __le32/__le16 cast warnings
* bpf: fix references to free_bpf_prog_info() in comments
kernel/bpf/verifier.c
thermal: exynos: fix setting rising_threshold for Exynos5433
scsi: megaraid: silence a static checker bug
scsi: 3w-xxxx: fix a missing-check bug
scsi: 3w-9xxx: fix a missing-check bug
perf: fix invalid bit in diagnostic entry
s390/cpum_sf: Add data entry sizes to sampling trailer entry
brcmfmac: Add support for bcm43364 wireless chipset
mtd: rawnand: fsl_ifc: fix FSL NAND driver to read all ONFI parameter pages
media: saa7164: Fix driver name in debug output
libata: Fix command retry decision
media: rcar_jpu: Add missing clk_disable_unprepare() on error in jpu_open()
dma-iommu: Fix compilation when !CONFIG_IOMMU_DMA
* tty: Fix data race in tty_insert_flip_string_fixed_flag
drivers/tty/pty.c
HID: i2c-hid: check if device is there before really probing
powerpc/embedded6xx/hlwd-pic: Prevent interrupts from being handled by Starlet
drm/radeon: fix mode_valid's return type
* HID: hid-plantronics: Re-resend Update to map button for PTT products
drivers/hid/hid-plantronics.c
* ALSA: usb-audio: Apply rate limit to warning messages in URB complete callback
sound/usb/pcm.c
media: smiapp: fix timeout checking in smiapp_read_nvm
* md: fix NULL dereference of mddev->pers in remove_and_add_spares()
drivers/md/md.c
regulator: pfuze100: add .is_enable() for pfuze100_swb_regulator_ops
ALSA: emu10k1: Rate-limit error messages about page errors
* scsi: ufs: fix exception event handling
drivers/scsi/ufs/ufshcd.c
mwifiex: correct histogram data with appropriate index
* PCI: pciehp: Request control of native hotplug only if supported
drivers/acpi/pci_root.c
pinctrl: at91-pio4: add missing of_node_put
powerpc/8xx: fix invalid register expression in head_8xx.S
powerpc/powermac: Mark variable x as unused
powerpc/powermac: Add missing prototype for note_bootable_part()
powerpc/chrp/time: Make some functions static, add missing header include
powerpc/32: Add a missing include header
ath: Add regulatory mapping for Bahamas
ath: Add regulatory mapping for Bermuda
ath: Add regulatory mapping for Serbia
ath: Add regulatory mapping for Tanzania
ath: Add regulatory mapping for Uganda
ath: Add regulatory mapping for APL2_FCCA
ath: Add regulatory mapping for APL13_WORLD
ath: Add regulatory mapping for ETSI8_WORLD
ath: Add regulatory mapping for FCC3_ETSIC
* PCI: Prevent sysfs disable of device while driver is attached
drivers/pci/pci-sysfs.c
btrfs: qgroup: Finish rescan when hit the last leaf of extent tree
btrfs: add barriers to btrfs_sync_log before log_commit_wait wakeups
* media: videobuf2-core: don't call memop 'finish' when queueing
drivers/media/v4l2-core/videobuf2-core.c
wlcore: sdio: check for valid platform device data before suspend
mwifiex: handle race during mwifiex_usb_disconnect
mfd: cros_ec: Fail early if we cannot identify the EC
* ASoC: dpcm: fix BE dai not hw_free and shutdown
sound/soc/soc-pcm.c
Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
iwlwifi: pcie: fix race in Rx buffer allocator
perf/x86/intel/uncore: Correct fixed counter index check for NHM
perf/x86/intel/uncore: Correct fixed counter index check in generic code
usbip: usbip_detach: Fix memory, udev context and udev leak
f2fs: fix to don't trigger writeback during recovery
* disable loading f2fs module on PAGE_SIZE > 4KB
fs/f2fs/super.c
RDMA/mad: Convert BUG_ONs to error flows
powerpc/64s: Fix compiler store ordering to SLB shadow area
hvc_opal: don't set tb_ticks_per_usec in udbg_init_opal_common()
infiniband: fix a possible use-after-free bug
netfilter: ipset: List timing out entries with "timeout 1" instead of zero
* rtc: ensure rtc_set_alarm fails when alarms are not supported
drivers/rtc/interface.c
* mm/slub.c: add __printf verification to slab_err()
mm/slub.c
* mm: vmalloc: avoid racy handling of debugobjects in vunmap
mm/vmalloc.c
* nfsd: fix potential use-after-free in nfsd4_decode_getdeviceinfo
fs/nfsd/nfs4xdr.c
ALSA: fm801: add error handling for snd_ctl_add
ALSA: emu10k1: add error handling for snd_ctl_add
xen/netfront: raise max number of slots in xennet_get_responses()
* tracing: Quiet gcc warning about maybe unused link variable
kernel/trace/trace_kprobe.c
* tracing/kprobes: Fix trace_probe flags on enable_trace_kprobe() failure
kernel/trace/trace_kprobe.c
* tracing: Fix possible double free in event_enable_trigger_func()
kernel/trace/trace_events_trigger.c
* tracing: Fix double free of event_trigger_data
kernel/trace/trace_events_trigger.c
Input: elan_i2c - add another ACPI ID for Lenovo Ideapad 330-15AST
Input: i8042 - add Lenovo LaVie Z to the i8042 reset list
Input: elan_i2c - add ACPI ID for lenovo ideapad 330
MIPS: Fix off-by-one in pci_resource_to_user()
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>