This is the start of the stable review cycle for the 4.4.107 release. There are 115 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Dec 20 15:28:15 UTC 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.107-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.4.107-rc1 Miaoqing Pan <miaoqing@xxxxxxxxxxxxxx> ath9k: fix tx99 potential info leak Alex Vesker <valex@xxxxxxxxxxxx> IB/ipoib: Grab rtnl lock on heavy flush when calling ndo_open/stop Bart Van Assche <bart.vanassche@xxxxxxx> RDMA/cma: Avoid triggering undefined behavior Alexander Duyck <alexander.h.duyck@xxxxxxxxx> macvlan: Only deliver one copy of the frame to the macvlan interface Jan Kara <jack@xxxxxxx> udf: Avoid overflow when session starts at large offset Dan Carpenter <dan.carpenter@xxxxxxxxxx> scsi: bfa: integer overflow in debugfs weiping zhang <zhangweiping@xxxxxxxxxxxxxxx> scsi: sd: change allow_restart to bool in sysfs interface weiping zhang <zhangweiping@xxxxxxxxxxxxxxx> scsi: sd: change manage_start_stop to bool in sysfs interface Jia-Ju Bai <baijiaju1990@xxxxxxx> vt6655: Fix a possible sleep-in-atomic bug in vt6655_suspend Kurt Garloff <garloff@xxxxxxx> scsi: scsi_devinfo: Add REPORTLUN2 to EMC SYMMETRIX blacklist entry NeilBrown <neilb@xxxxxxxx> raid5: Set R5_Expanded on parity devices as well as data. Linus Walleij <linus.walleij@xxxxxxxxxx> pinctrl: adi2: Fix Kconfig build problem Bin Liu <b-liu@xxxxxx> usb: musb: da8xx: fix babble condition handling nixiaoming <nixiaoming@xxxxxxxxxx> tty fix oops when rmmod 8250 Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/perf/hv-24x7: Fix incorrect comparison in memord Martin Wilck <mwilck@xxxxxxx> scsi: hpsa: destroy sas transport properties before scsi_host Martin Wilck <mwilck@xxxxxxx> scsi: hpsa: cleanup sas_phy structures in sysfs when unloading Alex Williamson <alex.williamson@xxxxxxxxxx> PCI: Detach driver before procfs & sysfs teardown on device remove Christoph Hellwig <hch@xxxxxx> xfs: fix incorrect extent state in xfs_bmap_add_extent_unwritten_real Brian Foster <bfoster@xxxxxxxxxx> xfs: fix log block underflow during recovery cycle verification Jiri Slaby <jslaby@xxxxxxx> l2tp: cleanup l2tp_tunnel_delete calls tang.junhui <tang.junhui@xxxxxxxxxx> bcache: fix wrong cache_misses statistics Liang Chen <liangchen.linux@xxxxxxxxx> bcache: explicitly destroy mutex while exiting Bob Peterson <rpeterso@xxxxxxxxxx> GFS2: Take inode off order_write list when setting jdata flag Daniel Lezcano <daniel.lezcano@xxxxxxxxxx> thermal/drivers/step_wise: Fix temperature regulation misbehavior Gao Feng <gfree.wind@xxxxxxxxxxx> ppp: Destroy the mutex when cleanup Michał Mirosław <mirq-linux@xxxxxxxxxxxx> clk: tegra: Fix cclk_lp divisor register Sébastien Szymanski <sebastien.szymanski@xxxxxxxxxxxx> clk: imx6: refine hdmi_isfr's parent to make HDMI work on i.MX6 SoCs w/o VPU Chen Zhong <chen.zhong@xxxxxxxxxxxx> clk: mediatek: add the option for determining PLL source clock Jan Kara <jack@xxxxxxx> mm: Handle 0 flags in _calc_vm_trans() macro Robert Baronescu <robert.baronescu@xxxxxxx> crypto: tcrypt - fix buffer lengths in test_aead_speed() Suzuki K Poulose <suzuki.poulose@xxxxxxx> arm-ccn: perf: Prevent module unload while PMU is in use Jiang Yi <jiangyilism@xxxxxxxxx> target/file: Do not return error for UNMAP if length is zero tangwenji <tang.wenji@xxxxxxxxxx> target:fix condition return in core_pr_dump_initiator_port() tangwenji <tang.wenji@xxxxxxxxxx> iscsi-target: fix memory leak in lio_target_tiqn_addtpg() Bart Van Assche <bart.vanassche@xxxxxxx> target/iscsi: Fix a race condition in iscsit_add_reject_from_cmd() Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx> platform/x86: sony-laptop: Fix error handling in sony_nc_setup_rfkill() Christophe Leroy <christophe.leroy@xxxxxx> powerpc/ipic: Fix status get and status clear William A. Kennington III <wak@xxxxxxxxxx> powerpc/opal: Fix EBUSY bug in acquiring tokens KUWAZAWA Takuya <albatross0@xxxxxxxxx> netfilter: ipvs: Fix inappropriate output of procfs Shriya <shriyak@xxxxxxxxxxxxxxxxxx> powerpc/powernv/cpufreq: Fix the frequency read by /proc/cpuinfo Qiang <zhengqiang10@xxxxxxxxxx> PCI/PME: Handle invalid data when reading Root Status Peter Ujfalusi <peter.ujfalusi@xxxxxx> dmaengine: ti-dma-crossbar: Correct am335x/am43xx mux value type Philipp Zabel <p.zabel@xxxxxxxxxxxxxx> rtc: pcf8563: fix output clock rate Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> video: fbdev: au1200fb: Return an error code if a memory allocation fails Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> video: fbdev: au1200fb: Release some resources if a memory allocation fails Ladislav Michl <ladis@xxxxxxxxxxxxxx> video: udlfb: Fix read EDID timeout Geert Uytterhoeven <geert@xxxxxxxxxxxxxx> fbdev: controlfb: Add missing modes to fix out of bounds access Robert Stonehouse <rstonehouse@xxxxxxxxxxxxxx> sfc: don't warn on successful change of MAC Mike Christie <mchristi@xxxxxxxxxx> target: fix race during implicit transition work flushes Mike Christie <mchristi@xxxxxxxxxx> target: fix ALUA transition timeout handling Mike Christie <mchristi@xxxxxxxxxx> target: Use system workqueue for ALUA transitions Zygo Blaxell <ce3g8jdj@xxxxxxxxxxxxxxxxxxxxx> btrfs: add missing memset while reading compressed inline extents Olga Kornievskaia <kolga@xxxxxxxxxx> NFSv4.1 respect server's max size in CREATE_SESSION Daniel Drake <drake@xxxxxxxxxxxx> efi/esrt: Cleanup bad memory map log messages Daniel Borkmann <daniel@xxxxxxxxxxxxx> perf symbols: Fix symbols__fixup_end heuristic for corner cases Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx> net/mlx4_core: Avoid delays during VF driver device shutdown David Howells <dhowells@xxxxxxxxxx> afs: Fix afs_kill_pages() David Howells <dhowells@xxxxxxxxxx> afs: Fix page leak in afs_write_begin() Marc Dionne <marc.dionne@xxxxxxxxxxxx> afs: Populate and use client modification time David Howells <dhowells@xxxxxxxxxx> afs: Fix the maths in afs_fs_store_data() Tina Ruchandani <ruchandani.tina@xxxxxxxxx> afs: Prevent callback expiry timer overflow Tina Ruchandani <ruchandani.tina@xxxxxxxxx> afs: Migrate vlocation fields to 64-bit David Howells <dhowells@xxxxxxxxxx> afs: Flush outstanding writes when an fd is closed Marc Dionne <marc.dionne@xxxxxxxxxxxx> afs: Adjust mode bits processing Marc Dionne <marc.dionne@xxxxxxxxxxxx> afs: Populate group ID from vnode status David Howells <dhowells@xxxxxxxxxx> afs: Fix missing put_page() Alex Deucher <alexander.deucher@xxxxxxx> drm/radeon: reinstate oland workaround for sclk yong mao <yong.mao@xxxxxxxxxxxx> mmc: mediatek: Fixed bug where clock frequency could be set wrong Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx> sched/deadline: Use deadline instead of period when calculating overflow Daniel Bristot de Oliveira <bristot@xxxxxxxxxx> sched/deadline: Throttle a constrained deadline task activated after the deadline Daniel Bristot de Oliveira <bristot@xxxxxxxxxx> sched/deadline: Make sure the replenishment timer fires in the next period Alex Deucher <alexander.deucher@xxxxxxx> drm/radeon/si: add dpm quirk for Oland Taku Izumi <izumi.taku@xxxxxxxxxxxxxx> fjes: Fix wrong netdevice feature flags Don Brace <don.brace@xxxxxxxxxxxxx> scsi: hpsa: limit outstanding rescans Don Brace <don.brace@xxxxxxxxxxxxx> scsi: hpsa: update check for logical volume status Stafford Horne <shorne@xxxxxxxxx> openrisc: fix issue handling 8 byte get_user calls Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx> intel_th: pci: Add Gemini Lake support Jiri Pirko <jiri@xxxxxxxxxxxx> mlxsw: reg: Fix SPVMLR max record count Jiri Pirko <jiri@xxxxxxxxxxxx> mlxsw: reg: Fix SPVM max record count Vlad Yasevich <vyasevich@xxxxxxxxx> net: Resend IGMP memberships upon peer notification. Matthias Kaehlcke <mka@xxxxxxxxxxxx> dmaengine: Fix array index out of bounds warning in __get_unmap_pool() Johan Hovold <johan@xxxxxxxxxx> net: wimax/i2400m: fix NULL-deref at probe Tahsin Erdogan <tahsin@xxxxxxxxxx> writeback: fix memory leak in wb_queue_work() Florian Westphal <fw@xxxxxxxxx> netfilter: bridge: honor frag_max_size when refragmenting Tomi Valkeinen <tomi.valkeinen@xxxxxx> drm/omap: fix dmabuf mmap for dma_alloc'ed buffers Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> Input: i8042 - add TUXEDO BU1406 (N24_25BU) to the nomux list NeilBrown <neilb@xxxxxxxx> NFSD: fix nfsd_reset_versions for NFSv4. NeilBrown <neilb@xxxxxxxx> NFSD: fix nfsd_minorversion(.., NFSD_AVAIL) Doug Berger <opendmb@xxxxxxxxx> net: bcmgenet: Power up the internal PHY before probing the MII Doug Berger <opendmb@xxxxxxxxx> net: bcmgenet: power down internal phy if open or resume fails Doug Berger <opendmb@xxxxxxxxx> net: bcmgenet: reserved phy revisions must be checked first Doug Berger <opendmb@xxxxxxxxx> net: bcmgenet: correct MIB access of UniMAC RUNT counters Doug Berger <opendmb@xxxxxxxxx> net: bcmgenet: correct the RBUF_OVFL_CNT and RBUF_ERR_CNT MIB values Alexander Potapenko <glider@xxxxxxxxxx> net: initialize msg.msg_flags in recvfrom Andrea Arcangeli <aarcange@xxxxxxxxxx> userfaultfd: selftest: vm: allow to build in vm/ directory Andrea Arcangeli <aarcange@xxxxxxxxxx> userfaultfd: shmem: __do_fault requires VM_FAULT_NOPAGE Guoqing Jiang <gqjiang@xxxxxxxx> md-cluster: free md_cluster_info if node leave cluster Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx> usb: phy: isp1301: Add OF device ID table Ilan peer <ilan.peer@xxxxxxxxx> mac80211: Fix addition of mesh configuration element Eric Biggers <ebiggers@xxxxxxxxxx> KEYS: add missing permission check for request_key() destination Chandan Rajendra <chandan@xxxxxxxxxxxxxxxxxx> ext4: fix crash when a directory's i_size is too small Eryu Guan <eguan@xxxxxxxxxx> ext4: fix fdatasync(2) after fallocate(2) operation Adam Wallis <awallis@xxxxxxxxxxxxxx> dmaengine: dmatest: move callback wait queue to thread context Steven Rostedt <rostedt@xxxxxxxxxxx> sched/rt: Do not pull from current CPU if only one CPU to pull Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> xhci: Don't add a virt_dev to the devs array before it's fully allocated Sukumar Ghorai <sukumar.ghorai@xxxxxxxxx> Bluetooth: btusb: driver to enable the usb-wakeup feature Yan, Zheng <zyan@xxxxxxxxxx> ceph: drop negative child dentries before try pruning inode's alias Shuah Khan <shuahkh@xxxxxxxxxxxxxxx> usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: core: prevent malicious bNumInterfaces overflow David Kozub <zub@xxxxxxxxxxxxxxxxxx> USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID Changbin Du <changbin.du@xxxxxxxxx> tracing: Allocate mask_str buffer dynamically NeilBrown <neilb@xxxxxxxx> autofs: fix careless error in recent commit Eric Biggers <ebiggers@xxxxxxxxxx> crypto: salsa20 - fix blkcipher_walk API usage Eric Biggers <ebiggers@xxxxxxxxxx> crypto: hmac - require that the underlying hash algorithm is unkeyed ------------- Diffstat: Makefile | 4 +- arch/blackfin/Kconfig | 7 +- arch/blackfin/Kconfig.debug | 1 + arch/openrisc/include/asm/uaccess.h | 2 +- arch/powerpc/perf/hv-24x7.c | 2 +- arch/powerpc/platforms/powernv/opal-async.c | 6 +- arch/powerpc/platforms/powernv/setup.c | 2 +- arch/powerpc/sysdev/ipic.c | 4 +- arch/x86/crypto/salsa20_glue.c | 7 -- crypto/hmac.c | 6 +- crypto/salsa20_generic.c | 7 -- crypto/shash.c | 5 +- crypto/tcrypt.c | 6 +- drivers/bluetooth/btusb.c | 5 ++ drivers/bus/arm-ccn.c | 1 + drivers/clk/imx/clk-imx6q.c | 2 +- drivers/clk/mediatek/clk-mtk.h | 1 + drivers/clk/mediatek/clk-pll.c | 5 +- drivers/clk/tegra/clk-tegra30.c | 2 +- drivers/dma/dmaengine.c | 2 + drivers/dma/dmatest.c | 55 ++++++++------- drivers/dma/ti-dma-crossbar.c | 8 +-- drivers/firmware/efi/efi.c | 1 - drivers/firmware/efi/esrt.c | 2 +- drivers/gpu/drm/omapdrm/omap_gem_dmabuf.c | 3 - drivers/gpu/drm/radeon/si_dpm.c | 10 +++ drivers/hwtracing/intel_th/pci.c | 5 ++ drivers/infiniband/core/cma.c | 11 +-- drivers/infiniband/ulp/ipoib/ipoib_ib.c | 7 +- drivers/input/serio/i8042-x86ia64io.h | 7 ++ drivers/md/bcache/request.c | 6 +- drivers/md/bcache/super.c | 6 +- drivers/md/md-cluster.c | 1 + drivers/md/raid5.c | 5 +- drivers/mmc/host/mtk-sd.c | 4 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 95 +++++++++++++++++++++----- drivers/net/ethernet/broadcom/genet/bcmgenet.h | 10 ++- drivers/net/ethernet/mellanox/mlx4/cmd.c | 11 +++ drivers/net/ethernet/mellanox/mlx4/main.c | 11 +++ drivers/net/ethernet/mellanox/mlxsw/reg.h | 4 +- drivers/net/ethernet/sfc/ef10.c | 2 +- drivers/net/fjes/fjes_main.c | 2 +- drivers/net/macvlan.c | 2 +- drivers/net/ppp/ppp_generic.c | 1 + drivers/net/wimax/i2400m/usb.c | 3 + drivers/net/wireless/ath/ath9k/tx99.c | 5 ++ drivers/pci/pcie/pme.c | 5 +- drivers/pci/remove.c | 2 +- drivers/pinctrl/Kconfig | 3 +- drivers/platform/x86/sony-laptop.c | 14 ++-- drivers/rtc/rtc-pcf8563.c | 2 +- drivers/scsi/bfa/bfad_debugfs.c | 5 +- drivers/scsi/hpsa.c | 57 +++++++++------- drivers/scsi/hpsa.h | 1 + drivers/scsi/hpsa_cmd.h | 2 + drivers/scsi/scsi_devinfo.c | 2 +- drivers/scsi/sd.c | 12 +++- drivers/staging/vt6655/device_main.c | 3 +- drivers/target/iscsi/iscsi_target.c | 3 +- drivers/target/iscsi/iscsi_target_configfs.c | 3 +- drivers/target/target_core_alua.c | 33 +++------ drivers/target/target_core_file.c | 4 ++ drivers/target/target_core_pr.c | 4 +- drivers/thermal/step_wise.c | 11 +-- drivers/usb/core/config.c | 4 +- drivers/usb/host/xhci-mem.c | 15 ++-- drivers/usb/musb/da8xx.c | 10 ++- drivers/usb/phy/phy-isp1301.c | 7 ++ drivers/usb/storage/unusual_devs.h | 7 ++ drivers/usb/storage/unusual_uas.h | 7 ++ drivers/usb/usbip/stub_tx.c | 7 ++ drivers/video/fbdev/au1200fb.c | 7 +- drivers/video/fbdev/controlfb.h | 2 + drivers/video/fbdev/udlfb.c | 10 +-- fs/afs/callback.c | 7 +- fs/afs/file.c | 1 + fs/afs/fsclient.c | 22 +++--- fs/afs/inode.c | 11 +-- fs/afs/internal.h | 12 ++-- fs/afs/security.c | 7 +- fs/afs/server.c | 6 +- fs/afs/vlocation.c | 16 +++-- fs/afs/write.c | 32 +++++++-- fs/autofs4/waitq.c | 1 - fs/btrfs/inode.c | 14 ++++ fs/ceph/mds_client.c | 42 ++++++++++-- fs/ext4/extents.c | 1 + fs/ext4/namei.c | 4 ++ fs/fs-writeback.c | 35 ++++++---- fs/gfs2/file.c | 4 +- fs/nfs/nfs4client.c | 4 +- fs/nfsd/nfssvc.c | 30 ++++---- fs/proc/proc_tty.c | 3 +- fs/udf/super.c | 2 +- fs/userfaultfd.c | 2 +- fs/xfs/libxfs/xfs_bmap.c | 2 +- fs/xfs/xfs_log_recover.c | 2 +- include/crypto/internal/hash.h | 8 +++ include/linux/mlx4/device.h | 1 + include/linux/mman.h | 3 +- include/target/target_core_base.h | 2 +- kernel/sched/deadline.c | 62 +++++++++++++++-- kernel/sched/rt.c | 8 ++- kernel/trace/trace.c | 29 +++----- net/bridge/br_netfilter_hooks.c | 12 ++-- net/core/dev.c | 1 + net/l2tp/l2tp_core.c | 2 +- net/l2tp/l2tp_netlink.c | 2 +- net/mac80211/mesh.c | 2 - net/netfilter/ipvs/ip_vs_ctl.c | 4 ++ net/socket.c | 1 + security/keys/request_key.c | 48 ++++++++++--- tools/perf/util/symbol.c | 2 +- tools/testing/selftests/vm/Makefile | 4 ++ 114 files changed, 727 insertions(+), 320 deletions(-)