[PATCH 4.4 000/115] 4.4.107-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 4.4.107 release.
There are 115 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed Dec 20 15:28:15 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.107-rc1.gz
or in the git tree and branch at:
  git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 4.4.107-rc1

Miaoqing Pan <miaoqing@codeaurora.org>
    ath9k: fix tx99 potential info leak

Alex Vesker <valex@mellanox.com>
    IB/ipoib: Grab rtnl lock on heavy flush when calling ndo_open/stop

Bart Van Assche <bart.vanassche@wdc.com>
    RDMA/cma: Avoid triggering undefined behavior

Alexander Duyck <alexander.h.duyck@intel.com>
    macvlan: Only deliver one copy of the frame to the macvlan interface

Jan Kara <jack@suse.cz>
    udf: Avoid overflow when session starts at large offset

Dan Carpenter <dan.carpenter@oracle.com>
    scsi: bfa: integer overflow in debugfs

weiping zhang <zhangweiping@didichuxing.com>
    scsi: sd: change allow_restart to bool in sysfs interface

weiping zhang <zhangweiping@didichuxing.com>
    scsi: sd: change manage_start_stop to bool in sysfs interface

Jia-Ju Bai <baijiaju1990@163.com>
    vt6655: Fix a possible sleep-in-atomic bug in vt6655_suspend

Kurt Garloff <garloff@suse.de>
    scsi: scsi_devinfo: Add REPORTLUN2 to EMC SYMMETRIX blacklist entry

NeilBrown <neilb@suse.com>
    raid5: Set R5_Expanded on parity devices as well as data.

Linus Walleij <linus.walleij@linaro.org>
    pinctrl: adi2: Fix Kconfig build problem

Bin Liu <b-liu@ti.com>
    usb: musb: da8xx: fix babble condition handling

nixiaoming <nixiaoming@huawei.com>
    tty fix oops when rmmod 8250

Michael Ellerman <mpe@ellerman.id.au>
    powerpc/perf/hv-24x7: Fix incorrect comparison in memord

Martin Wilck <mwilck@suse.de>
    scsi: hpsa: destroy sas transport properties before scsi_host

Martin Wilck <mwilck@suse.de>
    scsi: hpsa: cleanup sas_phy structures in sysfs when unloading

Alex Williamson <alex.williamson@redhat.com>
    PCI: Detach driver before procfs & sysfs teardown on device remove

Christoph Hellwig <hch@lst.de>
    xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real

Brian Foster <bfoster@redhat.com>
    xfs: fix log block underflow during recovery cycle verification

Jiri Slaby <jslaby@suse.cz>
    l2tp: cleanup l2tp_tunnel_delete calls

tang.junhui <tang.junhui@zte.com.cn>
    bcache: fix wrong cache_misses statistics

Liang Chen <liangchen.linux@gmail.com>
    bcache: explicitly destroy mutex while exiting

Bob Peterson <rpeterso@redhat.com>
    GFS2: Take inode off order_write list when setting jdata flag

Daniel Lezcano <daniel.lezcano@linaro.org>
    thermal/drivers/step_wise: Fix temperature regulation misbehavior

Gao Feng <gfree.wind@vip.163.com>
    ppp: Destroy the mutex when cleanup

Michał Mirosław <mirq-linux@rere.qmqm.pl>
    clk: tegra: Fix cclk_lp divisor register

Sébastien Szymanski <sebastien.szymanski@armadeus.com>
    clk: imx6: refine hdmi_isfr's parent to make HDMI work on i.MX6 SoCs w/o VPU

Chen Zhong <chen.zhong@mediatek.com>
    clk: mediatek: add the option for determining PLL source clock

Jan Kara <jack@suse.cz>
    mm: Handle 0 flags in _calc_vm_trans() macro

Robert Baronescu <robert.baronescu@nxp.com>
    crypto: tcrypt - fix buffer lengths in test_aead_speed()

Suzuki K Poulose <suzuki.poulose@arm.com>
    arm-ccn: perf: Prevent module unload while PMU is in use

Jiang Yi <jiangyilism@gmail.com>
    target/file: Do not return error for UNMAP if length is zero

tangwenji <tang.wenji@zte.com.cn>
    target:fix condition return in core_pr_dump_initiator_port()

tangwenji <tang.wenji@zte.com.cn>
    iscsi-target: fix memory leak in lio_target_tiqn_addtpg()

Bart Van Assche <bart.vanassche@wdc.com>
    target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd()

Markus Elfring <elfring@users.sourceforge.net>
    platform/x86: sony-laptop: Fix error handling in sony_nc_setup_rfkill()

Christophe Leroy <christophe.leroy@c-s.fr>
    powerpc/ipic: Fix status get and status clear

William A. Kennington III <wak@google.com>
    powerpc/opal: Fix EBUSY bug in acquiring tokens

KUWAZAWA Takuya <albatross0@gmail.com>
    netfilter: ipvs: Fix inappropriate output of procfs

Shriya <shriyak@linux.vnet.ibm.com>
    powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo

Qiang <zhengqiang10@huawei.com>
    PCI/PME: Handle invalid data when reading Root Status

Peter Ujfalusi <peter.ujfalusi@ti.com>
    dmaengine: ti-dma-crossbar: Correct am335x/am43xx mux value type

Philipp Zabel <p.zabel@pengutronix.de>
    rtc: pcf8563: fix output clock rate

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    video: fbdev: au1200fb: Return an error code if a memory allocation fails

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    video: fbdev: au1200fb: Release some resources if a memory allocation fails

Ladislav Michl <ladis@linux-mips.org>
    video: udlfb: Fix read EDID timeout

Geert Uytterhoeven <geert@linux-m68k.org>
    fbdev: controlfb: Add missing modes to fix out of bounds access

Robert Stonehouse <rstonehouse@solarflare.com>
    sfc: don't warn on successful change of MAC

Mike Christie <mchristi@redhat.com>
    target: fix race during implicit transition work flushes

Mike Christie <mchristi@redhat.com>
    target: fix ALUA transition timeout handling

Mike Christie <mchristi@redhat.com>
    target: Use system workqueue for ALUA transitions

Zygo Blaxell <ce3g8jdj@umail.furryterror.org>
    btrfs: add missing memset while reading compressed inline extents

Olga Kornievskaia <kolga@netapp.com>
    NFSv4.1 respect server's max size in CREATE_SESSION

Daniel Drake <drake@endlessm.com>
    efi/esrt: Cleanup bad memory map log messages

Daniel Borkmann <daniel@iogearbox.net>
    perf symbols: Fix symbols__fixup_end heuristic for corner cases

Jack Morgenstein <jackm@dev.mellanox.co.il>
    net/mlx4_core: Avoid delays during VF driver device shutdown

David Howells <dhowells@redhat.com>
    afs: Fix afs_kill_pages()

David Howells <dhowells@redhat.com>
    afs: Fix page leak in afs_write_begin()

Marc Dionne <marc.dionne@auristor.com>
    afs: Populate and use client modification time

David Howells <dhowells@redhat.com>
    afs: Fix the maths in afs_fs_store_data()

Tina Ruchandani <ruchandani.tina@gmail.com>
    afs: Prevent callback expiry timer overflow

Tina Ruchandani <ruchandani.tina@gmail.com>
    afs: Migrate vlocation fields to 64-bit

David Howells <dhowells@redhat.com>
    afs: Flush outstanding writes when an fd is closed

Marc Dionne <marc.dionne@auristor.com>
    afs: Adjust mode bits processing

Marc Dionne <marc.dionne@auristor.com>
    afs: Populate group ID from vnode status

David Howells <dhowells@redhat.com>
    afs: Fix missing put_page()

Alex Deucher <alexander.deucher@amd.com>
    drm/radeon: reinstate oland workaround for sclk

yong mao <yong.mao@mediatek.com>
    mmc: mediatek: Fixed bug where clock frequency could be set wrong

Steven Rostedt (VMware) <rostedt@goodmis.org>
    sched/deadline: Use deadline instead of period when calculating overflow

Daniel Bristot de Oliveira <bristot@redhat.com>
    sched/deadline: Throttle a constrained deadline task activated after the deadline

Daniel Bristot de Oliveira <bristot@redhat.com>
    sched/deadline: Make sure the replenishment timer fires in the next period

Alex Deucher <alexander.deucher@amd.com>
    drm/radeon/si: add dpm quirk for Oland

Taku Izumi <izumi.taku@jp.fujitsu.com>
    fjes: Fix wrong netdevice feature flags

Don Brace <don.brace@microsemi.com>
    scsi: hpsa: limit outstanding rescans

Don Brace <don.brace@microsemi.com>
    scsi: hpsa: update check for logical volume status

Stafford Horne <shorne@gmail.com>
    openrisc: fix issue handling 8 byte get_user calls

Alexander Shishkin <alexander.shishkin@linux.intel.com>
    intel_th: pci: Add Gemini Lake support

Jiri Pirko <jiri@mellanox.com>
    mlxsw: reg: Fix SPVMLR max record count

Jiri Pirko <jiri@mellanox.com>
    mlxsw: reg: Fix SPVM max record count

Vlad Yasevich <vyasevich@gmail.com>
    net: Resend IGMP memberships upon peer notification.

Matthias Kaehlcke <mka@chromium.org>
    dmaengine: Fix array index out of bounds warning in __get_unmap_pool()

Johan Hovold <johan@kernel.org>
    net: wimax/i2400m: fix NULL-deref at probe

Tahsin Erdogan <tahsin@google.com>
    writeback: fix memory leak in wb_queue_work()

Florian Westphal <fw@strlen.de>
    netfilter: bridge: honor frag_max_size when refragmenting

Tomi Valkeinen <tomi.valkeinen@ti.com>
    drm/omap: fix dmabuf mmap for dma_alloc'ed buffers

Dmitry Torokhov <dmitry.torokhov@gmail.com>
    Input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list

NeilBrown <neilb@suse.com>
    NFSD: fix nfsd_reset_versions for NFSv4.

NeilBrown <neilb@suse.com>
    NFSD: fix nfsd_minorversion(.., NFSD_AVAIL)

Doug Berger <opendmb@gmail.com>
    net: bcmgenet: Power up the internal PHY before probing the MII

Doug Berger <opendmb@gmail.com>
    net: bcmgenet: power down internal phy if open or resume fails

Doug Berger <opendmb@gmail.com>
    net: bcmgenet: reserved phy revisions must be checked first

Doug Berger <opendmb@gmail.com>
    net: bcmgenet: correct MIB access of UniMAC RUNT counters

Doug Berger <opendmb@gmail.com>
    net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values

Alexander Potapenko <glider@google.com>
    net: initialize msg.msg_flags in recvfrom

Andrea Arcangeli <aarcange@redhat.com>
    userfaultfd: selftest: vm: allow to build in vm/ directory

Andrea Arcangeli <aarcange@redhat.com>
    userfaultfd: shmem: __do_fault requires VM_FAULT_NOPAGE

Guoqing Jiang <gqjiang@suse.com>
    md-cluster: free md_cluster_info if node leave cluster

Javier Martinez Canillas <javier@osg.samsung.com>
    usb: phy: isp1301: Add OF device ID table

Ilan peer <ilan.peer@intel.com>
    mac80211: Fix addition of mesh configuration element

Eric Biggers <ebiggers@google.com>
    KEYS: add missing permission check for request_key() destination

Chandan Rajendra <chandan@linux.vnet.ibm.com>
    ext4: fix crash when a directory's i_size is too small

Eryu Guan <eguan@redhat.com>
    ext4: fix fdatasync(2) after fallocate(2) operation

Adam Wallis <awallis@codeaurora.org>
    dmaengine: dmatest: move callback wait queue to thread context

Steven Rostedt <rostedt@goodmis.org>
    sched/rt: Do not pull from current CPU if only one CPU to pull

Mathias Nyman <mathias.nyman@linux.intel.com>
    xhci: Don't add a virt_dev to the devs array before it's fully allocated

Sukumar Ghorai <sukumar.ghorai@intel.com>
    Bluetooth: btusb: driver to enable the usb-wakeup feature

Yan, Zheng <zyan@redhat.com>
    ceph: drop negative child dentries before try pruning inode's alias

Shuah Khan <shuahkh@osg.samsung.com>
    usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer

Alan Stern <stern@rowland.harvard.edu>
    USB: core: prevent malicious bNumInterfaces overflow

David Kozub <zub@linux.fjfi.cvut.cz>
    USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID

Changbin Du <changbin.du@intel.com>
    tracing: Allocate mask_str buffer dynamically

NeilBrown <neilb@suse.com>
    autofs: fix careless error in recent commit

Eric Biggers <ebiggers@google.com>
    crypto: salsa20 - fix blkcipher_walk API usage

Eric Biggers <ebiggers@google.com>
    crypto: hmac - require that the underlying hash algorithm is unkeyed


-------------

Diffstat:

 Makefile                                       |  4 +-
 arch/blackfin/Kconfig                          |  7 +-
 arch/blackfin/Kconfig.debug                    |  1 +
 arch/openrisc/include/asm/uaccess.h            |  2 +-
 arch/powerpc/perf/hv-24x7.c                    |  2 +-
 arch/powerpc/platforms/powernv/opal-async.c    |  6 +-
 arch/powerpc/platforms/powernv/setup.c         |  2 +-
 arch/powerpc/sysdev/ipic.c                     |  4 +-
 arch/x86/crypto/salsa20_glue.c                 |  7 --
 crypto/hmac.c                                  |  6 +-
 crypto/salsa20_generic.c                       |  7 --
 crypto/shash.c                                 |  5 +-
 crypto/tcrypt.c                                |  6 +-
 drivers/bluetooth/btusb.c                      |  5 ++
 drivers/bus/arm-ccn.c                          |  1 +
 drivers/clk/imx/clk-imx6q.c                    |  2 +-
 drivers/clk/mediatek/clk-mtk.h                 |  1 +
 drivers/clk/mediatek/clk-pll.c                 |  5 +-
 drivers/clk/tegra/clk-tegra30.c                |  2 +-
 drivers/dma/dmaengine.c                        |  2 +
 drivers/dma/dmatest.c                          | 55 ++++++++-------
 drivers/dma/ti-dma-crossbar.c                  |  8 +--
 drivers/firmware/efi/efi.c                     |  1 -
 drivers/firmware/efi/esrt.c                    |  2 +-
 drivers/gpu/drm/omapdrm/omap_gem_dmabuf.c      |  3 -
 drivers/gpu/drm/radeon/si_dpm.c                | 10 +++
 drivers/hwtracing/intel_th/pci.c               |  5 ++
 drivers/infiniband/core/cma.c                  | 11 +--
 drivers/infiniband/ulp/ipoib/ipoib_ib.c        |  7 +-
 drivers/input/serio/i8042-x86ia64io.h          |  7 ++
 drivers/md/bcache/request.c                    |  6 +-
 drivers/md/bcache/super.c                      |  6 +-
 drivers/md/md-cluster.c                        |  1 +
 drivers/md/raid5.c                             |  5 +-
 drivers/mmc/host/mtk-sd.c                      |  4 +-
 drivers/net/ethernet/broadcom/genet/bcmgenet.c | 95 +++++++++++++++++++++-----
 drivers/net/ethernet/broadcom/genet/bcmgenet.h | 10 ++-
 drivers/net/ethernet/mellanox/mlx4/cmd.c       | 11 +++
 drivers/net/ethernet/mellanox/mlx4/main.c      | 11 +++
 drivers/net/ethernet/mellanox/mlxsw/reg.h      |  4 +-
 drivers/net/ethernet/sfc/ef10.c                |  2 +-
 drivers/net/fjes/fjes_main.c                   |  2 +-
 drivers/net/macvlan.c                          |  2 +-
 drivers/net/ppp/ppp_generic.c                  |  1 +
 drivers/net/wimax/i2400m/usb.c                 |  3 +
 drivers/net/wireless/ath/ath9k/tx99.c          |  5 ++
 drivers/pci/pcie/pme.c                         |  5 +-
 drivers/pci/remove.c                           |  2 +-
 drivers/pinctrl/Kconfig                        |  3 +-
 drivers/platform/x86/sony-laptop.c             | 14 ++--
 drivers/rtc/rtc-pcf8563.c                      |  2 +-
 drivers/scsi/bfa/bfad_debugfs.c                |  5 +-
 drivers/scsi/hpsa.c                            | 57 +++++++++-------
 drivers/scsi/hpsa.h                            |  1 +
 drivers/scsi/hpsa_cmd.h                        |  2 +
 drivers/scsi/scsi_devinfo.c                    |  2 +-
 drivers/scsi/sd.c                              | 12 +++-
 drivers/staging/vt6655/device_main.c           |  3 +-
 drivers/target/iscsi/iscsi_target.c            |  3 +-
 drivers/target/iscsi/iscsi_target_configfs.c   |  3 +-
 drivers/target/target_core_alua.c              | 33 +++------
 drivers/target/target_core_file.c              |  4 ++
 drivers/target/target_core_pr.c                |  4 +-
 drivers/thermal/step_wise.c                    | 11 +--
 drivers/usb/core/config.c                      |  4 +-
 drivers/usb/host/xhci-mem.c                    | 15 ++--
 drivers/usb/musb/da8xx.c                       | 10 ++-
 drivers/usb/phy/phy-isp1301.c                  |  7 ++
 drivers/usb/storage/unusual_devs.h             |  7 ++
 drivers/usb/storage/unusual_uas.h              |  7 ++
 drivers/usb/usbip/stub_tx.c                    |  7 ++
 drivers/video/fbdev/au1200fb.c                 |  7 +-
 drivers/video/fbdev/controlfb.h                |  2 +
 drivers/video/fbdev/udlfb.c                    | 10 +--
 fs/afs/callback.c                              |  7 +-
 fs/afs/file.c                                  |  1 +
 fs/afs/fsclient.c                              | 22 +++---
 fs/afs/inode.c                                 | 11 +--
 fs/afs/internal.h                              | 12 ++--
 fs/afs/security.c                              |  7 +-
 fs/afs/server.c                                |  6 +-
 fs/afs/vlocation.c                             | 16 +++--
 fs/afs/write.c                                 | 32 +++++++--
 fs/autofs4/waitq.c                             |  1 -
 fs/btrfs/inode.c                               | 14 ++++
 fs/ceph/mds_client.c                           | 42 ++++++++++--
 fs/ext4/extents.c                              |  1 +
 fs/ext4/namei.c                                |  4 ++
 fs/fs-writeback.c                              | 35 ++++++----
 fs/gfs2/file.c                                 |  4 +-
 fs/nfs/nfs4client.c                            |  4 +-
 fs/nfsd/nfssvc.c                               | 30 ++++----
 fs/proc/proc_tty.c                             |  3 +-
 fs/udf/super.c                                 |  2 +-
 fs/userfaultfd.c                               |  2 +-
 fs/xfs/libxfs/xfs_bmap.c                       |  2 +-
 fs/xfs/xfs_log_recover.c                       |  2 +-
 include/crypto/internal/hash.h                 |  8 +++
 include/linux/mlx4/device.h                    |  1 +
 include/linux/mman.h                           |  3 +-
 include/target/target_core_base.h              |  2 +-
 kernel/sched/deadline.c                        | 62 +++++++++++++++--
 kernel/sched/rt.c                              |  8 ++-
 kernel/trace/trace.c                           | 29 +++-----
 net/bridge/br_netfilter_hooks.c                | 12 ++--
 net/core/dev.c                                 |  1 +
 net/l2tp/l2tp_core.c                           |  2 +-
 net/l2tp/l2tp_netlink.c                        |  2 +-
 net/mac80211/mesh.c                            |  2 -
 net/netfilter/ipvs/ip_vs_ctl.c                 |  4 ++
 net/socket.c                                   |  1 +
 security/keys/request_key.c                    | 48 ++++++++++---
 tools/perf/util/symbol.c                       |  2 +-
 tools/testing/selftests/vm/Makefile            |  4 ++
 114 files changed, 727 insertions(+), 320 deletions(-)