UBUNTU: Ubuntu-4.4.0-11.26

Signed-off-by: Tim Gardner <tim.gardner@canonical.com>

debian.master/changelog

-linux (4.4.0-11.26) UNRELEASED; urgency=low
+linux (4.4.0-11.26) xenial; urgency=low
 
-  CHANGELOG: Do not edit directly. Autogenerated at release.
-  CHANGELOG: Use the printchanges target to see the curent changes.
-  CHANGELOG: Use the insertchanges target to create the final log.
+  [ Tim Gardner ]
+
+  * Release Tracking Bug
+    - LP: #1553391
+
+  * Xenial update to v4.4.4 stable release (LP: #1553179)
+    - af_iucv: Validate socket address length in iucv_sock_bind()
+    - gro: Make GRO aware of lightweight tunnels.
+    - net: dp83640: Fix tx timestamp overflow handling.
+    - tunnels: Allow IPv6 UDP checksums to be correctly controlled.
+    - lwt: fix rx checksum setting for lwt devices tunneling over ipv6
+    - tcp: fix NULL deref in tcp_v4_send_ack()
+    - af_unix: fix struct pid memory leak
+    - pptp: fix illegal memory access caused by multiple bind()s
+    - sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
+    - net: dsa: fix mv88e6xxx switches
+    - tipc: fix connection abort during subscription cancel
+    - inet: frag: Always orphan skbs inside ip_defrag()
+    - switchdev: Require RTNL mutex to be held when sending FDB notifications
+    - tcp: beware of alignments in tcp_get_info()
+    - ipv6: enforce flowi6_oif usage in ip6_dst_lookup_tail()
+    - ipv6/udp: use sticky pktinfo egress ifindex on connect()
+    - ipv6: addrconf: Fix recursive spin lock call
+    - ipv6: fix a lockdep splat
+    - unix: correctly track in-flight fds in sending process user_struct
+    - tcp: do not drop syn_recv on all icmp reports
+    - net:Add sysctl_max_skb_frags
+    - tg3: Fix for tg3 transmit queue 0 timed out when too many gso_segs
+    - enic: increment devcmd2 result ring in case of timeout
+    - sctp: translate network order to host order when users get a hmacid
+    - net: Copy inner L3 and L4 headers as unaligned on GRE TEB
+    - flow_dissector: Fix unaligned access in __skb_flow_dissector when used by
+      eth_get_headlen
+    - bpf: fix branch offset adjustment on backjumps after patching ctx expansion
+    - bonding: Fix ARP monitor validation
+    - ipv4: fix memory leaks in ip_cmsg_send() callers
+    - af_unix: Don't set err in unix_stream_read_generic unless there was an error
+    - af_unix: Guard against other == sk in unix_dgram_sendmsg
+    - tipc: fix premature addition of node to lookup table
+    - tcp: md5: release request socket instead of listener
+    - qmi_wwan: add "4G LTE usb-modem U901"
+    - net/mlx4_en: Count HW buffer overrun only once
+    - net/mlx4_en: Avoid changing dev->features directly in run-time
+    - l2tp: Fix error creating L2TP tunnels
+    - pppoe: fix reference counting in PPPoE proxy
+    - net_sched fix: reclassification needs to consider ether protocol changes
+    - route: check and remove route cache when we get route
+    - tcp/dccp: fix another race at listener dismantle
+    - IFF_NO_QUEUE: Fix for drivers not calling ether_setup()
+    - rtnl: RTM_GETNETCONF: fix wrong return value
+    - tipc: unlock in error path
+    - unix_diag: fix incorrect sign extension in unix_lookup_by_ino
+    - sctp: Fix port hash table size computation
+    - ext4: fix bh->b_state corruption
+    - ARM: debug-ll: fix BCM63xx entry for multiplatform
+    - arm64: errata: Add -mpc-relative-literal-loads to build flags
+    - KVM: s390: fix guest fprs memory leak
+    - devm_memremap: Fix error value when memremap failed
+    - drm/gma500: Use correct unref in the gem bo create function
+    - ARM: 8457/1: psci-smp is built only for SMP
+    - lib/ucs2_string: Add ucs2 -> utf8 helper functions
+    - efi: Use ucs2_as_utf8 in efivarfs instead of open coding a bad version
+    - efi: Do variable name validation tests in utf8
+    - efi: Make our variable validation list include the guid
+    - efi: Make efivarfs entries immutable by default
+    - efi: Add pstore variables to the deletion whitelist
+    - lib/ucs2_string: Correct ucs2 -> utf8 conversion
+    - bcache: fix a livelock when we cause a huge number of cache misses
+    - bcache: Add a cond_resched() call to gc
+    - bcache: clear BCACHE_DEV_UNLINK_DONE flag when attaching a backing device
+    - bcache: fix a leak in bch_cached_dev_run()
+    - bcache: unregister reboot notifier if bcache fails to unregister device
+    - bcache: allows use of register in udev to avoid "device_busy" error.
+    - bcache: Change refill_dirty() to always scan entire disk if necessary
+    - dm thin: fix race condition when destroying thin pool workqueue
+    - can: ems_usb: Fix possible tx overflow
+    - usb: dwc3: Fix assignment of EP transfer resources
+    - USB: cp210x: add IDs for GE B650V3 and B850V3 boards
+    - USB: option: add support for SIM7100E
+    - USB: option: add "4G LTE usb-modem U901"
+    - drivers: android: correct the size of struct binder_uintptr_t for
+      BC_DEAD_BINDER_DONE
+    - spi: omap2-mcspi: Prevent duplicate gpio_request
+    - iw_cxgb3: Fix incorrectly returning error on success
+    - drm/i915: shut up gen8+ SDE irq dmesg noise
+    - ocfs2: unlock inode if deleting inode from orphan fails
+    - mm: thp: fix SMP race condition between THP page fault and MADV_DONTNEED
+    - mm: numa: quickly fail allocations for NUMA balancing on full nodes
+    - genirq: Validate action before dereferencing it in handle_irq_event_percpu()
+    - clocksource/drivers/vt8500: Increase the minimum delta
+    - s390/kvm: remove dependency on struct save_area definition
+    - KVM: s390: fix memory overwrites when vx is disabled
+    - Btrfs: add missing brelse when superblock checksum fails
+    - Btrfs: igrab inode in writepage
+    - btrfs: statfs: report zero available if metadata are exhausted
+    - Btrfs: send, don't BUG_ON() when an empty symlink is found
+    - Btrfs: fix number of transaction units required to create symlink
+    - Btrfs: fix transaction handle leak on failure to create hard link
+    - Btrfs: Initialize btrfs_root->highest_objectid when loading tree root and
+      subvolume roots
+    - btrfs: initialize the seq counter in struct btrfs_device
+    - s390: fix normalization bug in exception table sorting
+    - s390/dasd: prevent incorrect length error under z/VM after PAV changes
+    - s390/dasd: fix refcount for PAV reassignment
+    - s390/dasd: fix performance drop
+    - uml: flush stdout before forking
+    - uml: fix hostfs mknod()
+    - um: link with -lpthread
+    - locks: fix unlock when fcntl_setlk races with a close
+    - rtlwifi: rtl_pci: Fix kernel panic
+    - rtlwifi: rtl8192cu: Add missing parameter setup
+    - rtlwifi: rtl8192ce: Fix handling of module parameters
+    - rtlwifi: rtl8192de: Fix incorrect module parameter descriptions
+    - rtlwifi: rtl8723ae: Fix initialization of module parameters
+    - rtlwifi: rtl8192se: Fix module parameter initialization
+    - rtlwifi: rtl8188ee: Fix module parameter initialization
+    - rtlwifi: rtl8723be: Fix module parameter initialization
+    - mei: fix fasync return value on error
+    - mei: validate request value in client notify request ioctl
+    - namei: ->d_inode of a pinned dentry is stable only for positives
+    - rc: sunxi-cir: Initialize the spinlock properly
+    - media: dvb-core: Don't force CAN_INVERSION_AUTO in oneshot mode
+    - si2157: return -EINVAL if firmware blob is too big
+    - gspca: ov534/topro: prevent a division by 0
+    - vb2: fix a regression in poll() behavior for output,streams
+    - tda1004x: only update the frontend properties if locked
+    - dm space map metadata: remove unused variable in brb_pop()
+    - dm snapshot: fix hung bios when copy error occurs
+    - dm: fix dm_rq_target_io leak on faults with .request_fn DM w/ blk-mq paths
+    - coresight: checking for NULL string in coresight_name_match()
+    - irqchip/omap-intc: Add support for spurious irq handling
+    - irqchip/mxs: Add missing set_handle_irq()
+    - irqchip/atmel-aic: Fix wrong bit operation for IRQ priority
+    - irqchip/gic-v3-its: Fix double ICC_EOIR write for LPI in EOImode==1
+    - posix-clock: Fix return code on the poll method's error path
+    - clockevents/tcb_clksrc: Prevent disabling an already disabled clock
+    - mmc: usdhi6rol0: handle NULL data in timeout
+    - mmc: sdhci-pci: Do not default to 33 Ohm driver strength for Intel SPT
+    - mmc: sdio: Fix invalid vdd in voltage switch power cycle
+    - mmc: mmc: Fix incorrect use of driver strength switching HS200 and HS400
+    - mmc: sdhci: Fix sdhci_runtime_pm_bus_on/off()
+    - mmc: core: Enable tuning according to the actual timing
+    - mmc: mmci: fix an ages old detection error
+    - mmc: sdhci-acpi: Fix card detect race for Intel BXT/APL
+    - mmc: pxamci: fix again read-only gpio detection polarity
+    - mmc: sdhci-pci: Fix card detect race for Intel BXT/APL
+    - mmc: sdhci: Allow override of mmc host operations
+    - mmc: sdhci: Allow override of get_cd() called from sdhci_request()
+    - Bluetooth: Use continuous scanning when creating LE connections
+    - Bluetooth: Add support of Toshiba Broadcom based devices
+    - Bluetooth: Fix incorrect removing of IRKs
+    - Bluetooth: 6lowpan: Fix kernel NULL pointer dereferences
+    - Bluetooth: 6lowpan: Fix handling of uncompressed IPv6 packets
+    - time: Avoid signed overflow in timekeeping_get_ns()
+    - cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
+    - Revert "MIPS: Fix PAGE_MASK definition"
+    - MIPS: Loongson-3: Fix SMP_ASK_C0COUNT IPI handler
+    - MIPS: hpet: Choose a safe value for the ETIME check
+    - MIPS: Fix some missing CONFIG_CPU_MIPSR6 #ifdefs
+    - MIPS: Fix buffer overflow in syscall_get_arguments()
+    - EDAC: Robustify workqueues destruction
+    - EDAC, mc_sysfs: Fix freeing bus' name
+    - sparc64: fix incorrect sign extension in sys_sparc64_personality
+    - clk: exynos: use irqsave version of spin_lock to avoid deadlock with irqs
+    - regulator: axp20x: Fix GPIO LDO enable value for AXP22x
+    - regulator: mt6311: MT6311_REGULATOR needs to select REGMAP_I2C
+    - virtio_balloon: fix race by fill and leak
+    - virtio_balloon: fix race between migration and ballooning
+    - virtio_pci: fix use after free on release
+    - drm/vmwgfx: Fix an incorrect lock check
+    - drm/vmwgfx: Fix a width / pitch mismatch on framebuffer updates
+    - drm/vmwgfx: respect 'nomodeset'
+    - drm/amdgpu: Fix off-by-one errors in amdgpu_vm_bo_map
+    - drm/amdgpu: call hpd_irq_event on resume
+    - drm/amdgpu: fix lost sync_to if scheduler is enabled.
+    - drm/amdgpu: fix tonga smu resume
+    - drm/amdgpu: fix amdgpu_bo_pin_restricted VRAM placing v2
+    - drm/amdgpu: no need to load MC firmware on fiji
+    - drm/amdgpu: move gmc7 support out of CIK dependency
+    - drm/amdgpu: iceland use CI based MC IP
+    - drm/amdgpu: The VI specific EXE bit should only apply to GMC v8.0 above
+    - drm/amdgpu: pull topaz gmc bits into gmc_v7
+    - drm/amdgpu: drop topaz support from gmc8 module
+    - drm/amdgpu: don't load MEC2 on topaz
+    - drm/amdgpu: remove exp hardware support from iceland
+    - drm/amdgpu: fix s4 resume
+    - drm/amdgpu: remove unnecessary forward declaration
+    - drm/amdgpu: hold reference to fences in amdgpu_sa_bo_new (v2)
+    - drm/amdgpu: fix issue with overlapping userptrs
+    - drm/amdgpu: use post-decrement in error handling
+    - drm/amdgpu: Don't hang in amdgpu_flip_work_func on disabled crtc.
+    - drm/amdgpu/pm: adjust display configuration after powerstate
+    - drm/nouveau/kms: take mode_config mutex in connector hotplug path
+    - drm/nouveau/display: Enable vblank irqs after display engine is on again.
+    - drm/nouveau/disp/dp: ensure sink is powered up before attempting link
+      training
+    - drm/nouveau: platform: Fix deferred probe
+    - drm/dp/mst: process broadcast messages correctly
+    - drm/dp/mst: always send reply for UP request
+    - drm/dp/mst: fix in MSTB RAD initialization
+    - drm/dp/mst: fix in RAD element access
+    - drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil
+    - drm/dp/mst: Calculate MST PBN with 31.32 fixed point
+    - drm/dp/mst: move GUID storage from mgr, port to only mst branch
+    - drm/dp/mst: Reverse order of MST enable and clearing VC payload table.
+    - drm/dp/mst: deallocate payload on port destruction
+    - drm/radeon: Fix off-by-one errors in radeon_vm_bo_set_addr
+    - drm/radeon: call hpd_irq_event on resume
+    - drm/radeon: Fix "slow" audio over DP on DCE8+
+    - drm/radeon: clean up fujitsu quirks
+    - drm/radeon: properly byte swap vce firmware setup
+    - drm/radeon: cleaned up VCO output settings for DP audio
+    - drm/radeon: Add a common function for DFS handling
+    - drm/radeon: fix DP audio support for APU with DCE4.1 display engine
+    - drm: add helper to check for wc memory support
+    - drm/radeon: mask out WC from BO on unsupported arches
+    - drm/radeon: hold reference to fences in radeon_sa_bo_new
+    - drm: fix missing reference counting decrease
+    - drm/i915: Restore inhibiting the load of the default context
+    - drm/i915: intel_hpd_init(): Fix suspend/resume reprobing
+    - drm/i915: Init power domains early in driver load
+    - drm/i915: Make sure DC writes are coherent on flush.
+    - drm/i915/dp: fall back to 18 bpp when sink capability is unknown
+    - drm/i915: Don't reject primary plane windowing with color keying enabled on
+      SKL+
+    - drm/i915/skl: Don't skip mst encoders in skl_ddi_pll_select()
+    - drm/i915/dsi: defend gpio table against out of bounds access
+    - drm/i915/dsi: don't pass arbitrary data to sideband
+    - drm/i915: fix error path in intel_setup_gmbus()
+    - drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command
+    - drm/radeon: use post-decrement in error handling
+    - drm: No-Op redundant calls to drm_vblank_off() (v2)
+    - drm: Prevent vblank counter bumps > 1 with active vblank clients. (v2)
+    - drm: Fix drm_vblank_pre/post_modeset regression from Linux 4.4
+    - drm: Fix treatment of drm_vblank_offdelay in drm_vblank_on() (v2)
+    - drm/radeon: Don't hang in radeon_flip_work_func on disabled crtc. (v2)
+    - drm/radeon/pm: adjust display configuration after powerstate
+    - make sure that freeing shmem fast symlinks is RCU-delayed
+    - toshiba_acpi: Fix blank screen at boot if transflective backlight is
+      supported
+    - ideapad-laptop: Add Lenovo ideapad Y700-17ISK to no_hw_rfkill dmi list
+    - ideapad-laptop: Add Lenovo Yoga 700 to no_hw_rfkill dmi list
+    - uapi: update install list after nvme.h rename
+    - lib: sw842: select crc32
+    - ACPI / video: Add disable_backlight_sysfs_if quirk for the Toshiba Portege
+      R700
+    - ACPI / video: Add disable_backlight_sysfs_if quirk for the Toshiba Satellite
+      R830
+    - ACPI: Revert "ACPI / video: Add Dell Inspiron 5737 to the blacklist"
+    - ACPI / PCI / hotplug: unlock in error path in acpiphp_enable_slot()
+    - nfit: fix multi-interface dimm handling, acpi6.1 compatibility
+    - dmaengine: dw: fix cyclic transfer setup
+    - dmaengine: dw: fix cyclic transfer callbacks
+    - dmaengine: at_xdmac: fix resume for cyclic transfers
+    - dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer
+    - IB/cm: Fix a recently introduced deadlock
+    - IB/qib: fix mcast detach when qp not attached
+    - IB/qib: Support creating qps with GFP_NOIO flag
+    - IB/mlx5: Expose correct maximum number of CQE capacity
+    - Thermal: initialize thermal zone device correctly
+    - Thermal: handle thermal zone device properly during system sleep
+    - Thermal: do thermal zone update after a cooling device registered
+    - hwmon: (dell-smm) Blacklist Dell Studio XPS 8000
+    - hwmon: (gpio-fan) Remove un-necessary speed_index lookup for thermal hook
+    - hwmon: (ads1015) Handle negative conversion values correctly
+    - cpufreq: pxa2xx: fix pxa_cpufreq_change_voltage prototype
+    - cpufreq: Fix NULL reference crash while accessing policy->governor_data
+    - seccomp: always propagate NO_NEW_PRIVS on tsync
+    - libceph: fix ceph_msg_revoke()
+    - libceph: don't bail early from try_read() when skipping a message
+    - libceph: use the right footer size when skipping a message
+    - libceph: don't spam dmesg with stray reply warnings
+    - sd: Optimal I/O size is in bytes, not sectors
+    - Staging: speakup: Fix getting port information
+    - Revert "Staging: panel: usleep_range is preferred over udelay"
+    - cdc-acm:exclude Samsung phone 04e8:685d
+    - perf stat: Do not clean event's private stats
+    - tick/nohz: Set the correct expiry when switching to nohz/lowres mode
+    - rfkill: fix rfkill_fop_read wait_event usage
+    - mac80211: Requeue work after scan complete for all VIF types.
+    - workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup
+    - Revert "workqueue: make sure delayed work run in local cpu"
+    - ALSA: hda - Apply clock gate workaround to Skylake, too
+    - ALSA: hda - Fixing background noise on Dell Inspiron 3162
+    - target: Fix LUN_RESET active I/O handling for ACK_KREF
+    - target: Fix LUN_RESET active TMR descriptor handling
+    - target: Fix TAS handling for multi-session se_node_acls
+    - target: Fix remote-port TMR ABORT + se_cmd fabric stop
+    - target: Fix race with SCF_SEND_DELAYED_TAS handling
+    - spi: atmel: fix gpio chip-select in case of non-DT platform
+    - libata: fix sff host state machine locking while polling
+    - ARCv2: STAR 9000950267: Handle return from intr to Delay Slot #2
+    - ARCv2: SMP: Emulate IPI to self using software triggered interrupt
+    - PCI/AER: Flush workqueue on device remove to avoid use-after-free
+    - cpuset: make mm migration asynchronous
+    - cgroup: make sure a parent css isn't offlined before its children
+    - writeback: keep superblock pinned during cgroup writeback association
+      switches
+    - phy: core: fix wrong err handle for phy_power_on
+    - i2c: i801: Adding Intel Lewisburg support for iTCO
+    - bio: return EINTR if copying to user space got interrupted
+    - block: fix use-after-free in dio_bio_complete
+    - nfs: fix nfs_size_to_loff_t
+    - NFSv4: Fix a dentry leak on alias use
+    - of/irq: Fix msi-map calculation for nonzero rid-base
+    - KVM: async_pf: do not warn on page allocation failures
+    - KVM: arm/arm64: vgic: Ensure bitmaps are long enough
+    - KVM: x86: fix missed hardware breakpoints
+    - KVM: x86: MMU: fix ubsan index-out-of-range warning
+    - powerpc/eeh: Fix partial hotplug criterion
+    - tracing: Fix showing function event in available_events
+    - sunrpc/cache: fix off-by-one in qword_get()
+    - kernel/resource.c: fix muxed resource handling in __request_region()
+    - do_last(): don't let a bogus return value from ->open() et.al. to confuse us
+    - ARM: OMAP2+: Fix onenand initialization to avoid filesystem corruption
+    - ARM: at91/dt: fix typo in sama5d2 pinmux descriptions
+    - xen/arm: correctly handle DMA mapping of compound pages
+    - xen/scsiback: correct frontend counting
+    - xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
+    - xen/pciback: Save the number of MSI-X entries to be copied later.
+    - xen/pcifront: Fix mysterious crashes when NUMA locality information was
+      extracted.
+    - should_follow_link(): validate ->d_seq after having decided to follow
+    - do_last(): ELOOP failure exit should be done after leaving RCU mode
+    - hpfs: don't truncate the file when delete fails
+    - x86/irq: Call chip->irq_set_affinity in proper context
+    - x86/irq: Fix a race in x86_vector_free_irqs()
+    - x86/irq: Validate that irq descriptor is still active
+    - x86/irq: Do not use apic_chip_data.old_domain as temporary buffer
+    - x86/irq: Reorganize the return path in assign_irq_vector
+    - x86/irq: Reorganize the search in assign_irq_vector
+    - x86/irq: Check vector allocation early
+    - x86/irq: Copy vectormask instead of an AND operation
+    - x86/irq: Get rid of code duplication
+    - x86/irq: Remove offline cpus from vector cleanup
+    - x86/irq: Clear move_in_progress before sending cleanup IPI
+    - x86/irq: Remove the cpumask allocation from send_cleanup_vector()
+    - x86/irq: Remove outgoing CPU from vector cleanup mask
+    - x86/irq: Call irq_force_move_complete with irq descriptor
+    - x86/irq: Plug vector cleanup race
+    - IB/cma: Fix RDMA port validation for iWarp
+    - iwlwifi: dvm: fix WoWLAN
+    - iwlwifi: pcie: properly configure the debug buffer size for 8000
+    - iwlwifi: update and fix 7265 series PCI IDs
+    - iwlwifi: mvm: don't allow sched scans without matches to be started
+    - Revert "UBUNTU: SAUCE: bcache: prevent crash on changing writeback_running"
+    - bcache: prevent crash on changing writeback_running
+    - Linux 4.4.4
+
+  * mlx4_en didn't choose time-stamping shift value according to HW frequency
+    (LP: #1552627)
+    - net/mlx4_en: Choose time-stamping shift value according to HW frequency
+
+  * [Ubuntu 16.04] Help to flush kernel panics to console (LP: #1552332)
+    - target/transport: add flag to indicate CPU Affinity is observed
+    - powerpc/powernv: Add a kmsg_dumper that flushes console output on panic
+    - powerpc/powernv: Fix OPAL_CONSOLE_FLUSH prototype and usages
+
+  * [Ubuntu 16.04] Update qla2xxx driver for POWER (QLogic) (LP: #1541456)
+    - qla2xxx: Fix warning reported by static checker
+    - qla2xxx: Fix TMR ABORT interaction issue between qla2xxx and TCM
+    - qla2xxx: Fix stale pointer access.
+    - qla2xxx: Use ATIO type to send correct tmr response
+    - qla2xxx: use TARGET_SCF_USE_CPUID flag to indiate CPU Affinity
+
+  * [s390x] zfcp.ko missing from scsi-modules udeb (LP: #1552314)
+    - [Config] Add s390x zfcp to scsi-modules udeb
 
  -- Tim Gardner <tim.gardner@canonical.com>  Wed, 02 Mar 2016 08:08:16 -0700