[PATCH 4.4 000/112] 4.4.28-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 4.4.28 release.
There are 112 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri Oct 28 12:22:47 UTC 2016.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.4.28-rc1.gz
or in the git tree and branch at:
  git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.4.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 4.4.28-rc1

Dinesh Israni <ddi@datera.io>
    target: Don't override EXTENDED_COPY xcopy_pt_cmd SCSI status code

Nicholas Bellinger <nab@linux-iscsi.org>
    target: Make EXTENDED_COPY 0xe4 failure return COPY TARGET DEVICE NOT REACHABLE

Nicholas Bellinger <nab@linux-iscsi.org>
    target: Re-add missing SCF_ACK_KREF assignment in v4.1.y

Richard Weinberger <richard@nod.at>
    ubifs: Abort readdir upon error

Richard Weinberger <richard@nod.at>
    ubifs: Fix xattr_names length in exit paths

Taesoo Kim <tsgatesv@gmail.com>
    jbd2: fix incorrect unlock on j_list_lock

Eric Biggers <ebiggers@google.com>
    ext4: do not advertise encryption support when disabled

Ulf Hansson <ulf.hansson@linaro.org>
    mmc: rtsx_usb_sdmmc: Handle runtime PM while changing the led

Ulf Hansson <ulf.hansson@linaro.org>
    mmc: rtsx_usb_sdmmc: Avoid keeping the device runtime resumed when unused

Jiri Slaby <jslaby@suse.cz>
    mmc: core: Annotate cmd_hdr as __le32

Frederic Barrat <fbarrat@linux.vnet.ibm.com>
    powerpc/mm: Prevent unlikely crash in copro_calculate_slb()

Nikolay Borisov <kernel@kyup.com>
    ceph: fix error handling in ceph_read_iter

Marc Zyngier <marc.zyngier@arm.com>
    arm64: kernel: Init MDCR_EL2 even in the absence of a PMU

Will Deacon <will.deacon@arm.com>
    arm64: percpu: rewrite ll/sc loops in assembly

Ulf Hansson <ulf.hansson@linaro.org>
    memstick: rtsx_usb_ms: Manage runtime PM when accessing the device

Alan Stern <stern@rowland.harvard.edu>
    memstick: rtsx_usb_ms: Runtime resume the device when polling for cards

Jan Kara <jack@suse.cz>
    isofs: Do not return EACCES for unknown filesystems

Vladimir Murzin <vladimir.murzin@arm.com>
    irqchip/gic-v3-its: Fix entry size mask for GITS_BASER

David Hildenbrand <dahi@linux.vnet.ibm.com>
    s390/mm: fix gmap tlb flush issues

Linus Torvalds <torvalds@linux-foundation.org>
    Using BUG_ON() as an assert() is _never_ acceptable

Johannes Weiner <hannes@cmpxchg.org>
    mm: filemap: fix mapping->nrpages double accounting in fuse

Johannes Weiner <hannes@cmpxchg.org>
    mm: workingset: fix crash in shadow node shrinker caused by replace_page_cache_page()

Vishal Verma <vishal.l.verma@intel.com>
    acpi, nfit: check for the correct event code in notifications

Jack Morgenstein <jackm@dev.mellanox.co.il>
    net/mlx4_core: Allow resetting VF admin mac to zero

Yuval Mintz <Yuval.Mintz@qlogic.com>
    bnx2x: Prevent false warning for lack of FC NPIV

Peter Jones <pjones@redhat.com>
    PKCS#7: Don't require SpcSpOpusInfo in Authenticode pkcs7 signatures

Don Brace <don.brace@microsemi.com>
    hpsa: correct skipping masked peripherals

Martin K. Petersen <martin.petersen@oracle.com>
    sd: Fix rw_max for devices that report an optimal xfer size

Dan Carpenter <dan.carpenter@oracle.com>
    irqchip/gicv3: Handle loop timeout proper

Jiri Slaby <jslaby@suse.cz>
    kvm: x86: memset whole irq_eoi

Dan Williams <dan.j.williams@intel.com>
    x86/e820: Don't merge consecutive E820_PRAM ranges

Bart Van Assche <bart.vanassche@sandisk.com>
    blkcg: Unlock blkcg_pol_mutex only once when cpd == NULL

Sachin Prabhu <sprabhu@redhat.com>
    Fix regression which breaks DFS mounting

Steve French <smfrench@gmail.com>
    Cleanup missing frees on some ioctls

Steve French <smfrench@gmail.com>
    Do not send SMB3 SET_INFO request if nothing is changing

Steve French <smfrench@gmail.com>
    SMB3: GUIDs should be constructed as random but valid uuids

Steve French <smfrench@gmail.com>
    Set previous session id correctly on SMB3 reconnect

Steve French <smfrench@gmail.com>
    Display number of credits available

Steve French <smfrench@gmail.com>
    Clarify locking of cifs file and tcon structures and make more granular

Aurelien Aptel <aaptel@suse.com>
    fs/cifs: keep guid when assigning fid to fileinfo

Ross Lagerwall <ross.lagerwall@citrix.com>
    cifs: Limit the overall credit acquired

Oleg Nesterov <oleg@redhat.com>
    fs/super.c: fix race between freeze_super() and thaw_super()

Al Viro <viro@zeniv.linux.org.uk>
    arc: don't leak bits of kernel stack into coredump

Jens Axboe <axboe@fb.com>
    lightnvm: ensure that nvm_dev_ops can be used without CONFIG_NVM

Manfred Spraul <manfred@colorfullife.com>
    ipc/sem.c: fix complex_count vs. simple op race

Johannes Weiner <hannes@cmpxchg.org>
    mm: filemap: don't plant shadow entries without radix tree node

Guenter Roeck <linux@roeck-us.net>
    metag: Only define atomic_dec_if_positive conditionally

Ming Lei <tom.leiming@gmail.com>
    scsi: Fix use-after-free

Jeff Layton <jlayton@poochiereds.net>
    NFSv4.2: Fix a reference leak in nfs42_proc_layoutstats_generic

Trond Myklebust <trond.myklebust@primarydata.com>
    NFSv4: Open state recovery must account for file permission changes

Trond Myklebust <trond.myklebust@primarydata.com>
    NFSv4: nfs4_copy_delegation_stateid() must fail if the delegation is invalid

Trond Myklebust <trond.myklebust@primarydata.com>
    NFSv4: Don't report revoked delegations as valid in nfs_have_delegation()

David Vrabel <david.vrabel@citrix.com>
    sunrpc: fix write space race causing stalls

Dmitry Torokhov <dmitry.torokhov@gmail.com>
    Input: elantech - add Fujitsu Lifebook E556 to force crc_enabled

Matti Kurkela <Matti.Kurkela@iki.fi>
    Input: elantech - force needed quirks on Fujitsu H760

Marcos Paulo de Souza <marcos.souza.org@gmail.com>
    Input: i8042 - skip selftest on ASUS laptops

Kees Cook <keescook@chromium.org>
    lib: add "on"/"off" support to kstrtobool

Kees Cook <keescook@chromium.org>
    lib: update single-char callers of strtobool()

Kees Cook <keescook@chromium.org>
    lib: move strtobool() to kstrtobool()

Marcin Nowakowski <marcin.nowakowski@imgtec.com>
    MIPS: ptrace: Fix regs_return_value for kernel context

James Hogan <james.hogan@imgtec.com>
    MIPS: Fix -mabi=64 build of vdso.lds

Hui Wang <hui.wang@canonical.com>
    ALSA: hda - Fix a failure of micmute led when having multi adcs

Mauro Carvalho Chehab <mchehab@osg.samsung.com>
    cx231xx: fix GPIOs for Pixelview SBTVD hybrid

Mauro Carvalho Chehab <mchehab@osg.samsung.com>
    cx231xx: don't return error on success

Mauro Carvalho Chehab <mchehab@osg.samsung.com>
    mb86a20s: fix demod settings

Mauro Carvalho Chehab <mchehab@osg.samsung.com>
    mb86a20s: fix the locking logic

Miklos Szeredi <mszeredi@redhat.com>
    ovl: copy_up_xattr(): use strnlen

Richard Weinberger <richard@nod.at>
    ovl: Fix info leak in ovl_lookup_temp()

Max Staudt <mstaudt@suse.de>
    fbdev/efifb: Fix 16 color palette entry calculation

Dan Carpenter <dan.carpenter@oracle.com>
    scsi: zfcp: spin_lock_irqsave() is not nestable

Steffen Maier <maier@linux.vnet.ibm.com>
    zfcp: trace full payload of all SAN records (req,resp,iels)

Steffen Maier <maier@linux.vnet.ibm.com>
    zfcp: fix payload trace length for SAN request&response

Steffen Maier <maier@linux.vnet.ibm.com>
    zfcp: fix D_ID field with actual value on tracing SAN responses

Steffen Maier <maier@linux.vnet.ibm.com>
    zfcp: restore tracing of handle for port and LUN with HBA records

Steffen Maier <maier@linux.vnet.ibm.com>
    zfcp: trace on request for open and close of WKA port

Steffen Maier <maier@linux.vnet.ibm.com>
    zfcp: restore: Dont use 0 to indicate invalid LUN in rec trace

Steffen Maier <maier@linux.vnet.ibm.com>
    zfcp: retain trace level for SCSI and HBA FSF response records

Steffen Maier <maier@linux.vnet.ibm.com>
    zfcp: close window with unblocked rport during rport gone

Steffen Maier <maier@linux.vnet.ibm.com>
    zfcp: fix ELS/GS request&response length for hardware data router

Steffen Maier <maier@linux.vnet.ibm.com>
    zfcp: fix fc_host port_type with NPIV

Richard Weinberger <richard@nod.at>
    ubi: Deal with interrupted erasures in WL

Laurent Dufour <ldufour@linux.vnet.ibm.com>
    powerpc/pseries: Fix stack corruption in htpe code

Paul Mackerras <paulus@ozlabs.org>
    powerpc/64: Fix incorrect return value from __copy_tofrom_user

Gavin Shan <gwshan@linux.vnet.ibm.com>
    powerpc/powernv: Use CPU-endian PEST in pnv_pci_dump_p7ioc_diag_data()

Gavin Shan <gwshan@linux.vnet.ibm.com>
    powerpc/powernv: Use CPU-endian hub diag-data type in pnv_eeh_get_and_dump_hub_diag()

Gavin Shan <gwshan@linux.vnet.ibm.com>
    powerpc/powernv: Pass CPU-endian PE number to opal_pci_eeh_freeze_clear()

Anton Blanchard <anton@samba.org>
    powerpc/vdso64: Use double word compare on pointers

Rabin Vincent <rabinv@axis.com>
    dm crypt: fix crash on exit

Mike Snitzer <snitzer@redhat.com>
    dm mpath: check if path's request_queue is dying in activate_path()

Minfei Huang <mnghuan@gmail.com>
    dm: return correct error code in dm_resume()'s retry loop

Bart Van Assche <bart.vanassche@sandisk.com>
    dm: mark request_queue dead before destroying the DM device

Adrian Hunter <adrian.hunter@intel.com>
    perf intel-pt: Fix MTC timestamp calculation for large MTC periods

Adrian Hunter <adrian.hunter@intel.com>
    perf intel-pt: Fix estimated timestamps for cycle-accurate mode

Adrian Hunter <adrian.hunter@intel.com>
    perf intel-pt: Fix snapshot overlap detection decoder errors

Andrew Bresticker <abrestic@chromium.org>
    pstore/ram: Use memcpy_fromio() to save old buffer

Furquan Shaikh <furquan@google.com>
    pstore/ram: Use memcpy_toio instead of memcpy

Sebastian Andrzej Siewior <bigeasy@linutronix.de>
    pstore/core: drop cmpxchg based updates

Sebastian Andrzej Siewior <bigeasy@linutronix.de>
    pstore/ramoops: fixup driver removal

Helge Deller <deller@gmx.de>
    parisc: Increase initial kernel mapping size

Helge Deller <deller@gmx.de>
    parisc: Fix kernel memory layout regarding position of __gp

Helge Deller <deller@gmx.de>
    parisc: Increase KERNEL_INITIAL_SIZE for 32-bit SMP kernels

Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
    cpufreq: intel_pstate: Fix unsafe HWP MSR access

Sergei Shtylyov <sergei.shtylyov@cogentembedded.com>
    platform: don't return 0 from platform_get_irq[_byname]() on error

Maik Broemme <mbroemme@libmpq.org>
    PCI: Mark Atheros AR9580 to avoid bus reset

Haibo Chen <haibo.chen@nxp.com>
    mmc: sdhci: cast unsigned int to unsigned long long to avoid unexpeted error

Daniel Glöckner <dg@emlix.com>
    mmc: block: don't use CMD23 with very old MMC cards

Larry Finger <Larry.Finger@lwfinger.net>
    rtlwifi: Fix missing country code for Great Britain

Lin Huang <hl@rock-chips.com>
    PM / devfreq: event: remove duplicate devfreq_event_get_drvdata()

Lucas Stach <l.stach@pengutronix.de>
    clk: imx6: initialize GPU clocks

Jan Remmet <j.remmet@phytec.de>
    regulator: tps65910: Work around silicon erratum SWCZ010

Alexander Usyskin <alexander.usyskin@intel.com>
    mei: me: add kaby point device ids

Liu Gang <Gang.Liu@nxp.com>
    gpio: mpc8xxx: Correct irq handler function


-------------

Diffstat:

 Documentation/kernel-parameters.txt                |   9 +-
 Makefile                                           |   4 +-
 arch/arc/kernel/signal.c                           |   8 +-
 arch/arm64/include/asm/percpu.h                    | 120 +++++++--------
 arch/arm64/kernel/head.S                           |   3 +-
 arch/metag/include/asm/atomic.h                    |   3 +-
 arch/mips/include/asm/ptrace.h                     |   2 +-
 arch/mips/vdso/Makefile                            |   2 +-
 arch/parisc/include/asm/pgtable.h                  |   6 +-
 arch/parisc/kernel/setup.c                         |   8 +
 arch/parisc/kernel/vmlinux.lds.S                   |   7 +-
 arch/powerpc/kernel/vdso64/datapage.S              |   2 +-
 arch/powerpc/kernel/vdso64/gettimeofday.S          |   2 +-
 arch/powerpc/lib/copyuser_64.S                     |   2 +-
 arch/powerpc/mm/copro_fault.c                      |   2 +
 arch/powerpc/platforms/powernv/eeh-powernv.c       |   4 +-
 arch/powerpc/platforms/powernv/pci.c               |   4 +-
 arch/powerpc/platforms/pseries/lpar.c              |   4 +-
 arch/s390/include/asm/tlbflush.h                   |   3 +-
 arch/s390/mm/pgtable.c                             |   4 +-
 arch/x86/kernel/e820.c                             |   2 +-
 arch/x86/kvm/ioapic.c                              |   2 +-
 block/blk-cgroup.c                                 |   4 +-
 crypto/asymmetric_keys/pkcs7_parser.c              |   4 +-
 drivers/acpi/nfit.c                                |   3 +
 drivers/acpi/nfit.h                                |   4 +
 drivers/base/platform.c                            |   4 +-
 drivers/clk/imx/clk-imx6q.c                        |  18 +++
 drivers/cpufreq/intel_pstate.c                     |  10 +-
 drivers/gpio/gpio-mpc8xxx.c                        |   2 +-
 drivers/input/mouse/elantech.c                     |  25 +++-
 drivers/input/serio/i8042-io.h                     |   2 +-
 drivers/input/serio/i8042-ip22io.h                 |   2 +-
 drivers/input/serio/i8042-ppcio.h                  |   2 +-
 drivers/input/serio/i8042-sparcio.h                |   2 +-
 drivers/input/serio/i8042-unicore32io.h            |   2 +-
 drivers/input/serio/i8042-x86ia64io.h              |  96 +++++++++++-
 drivers/input/serio/i8042.c                        |  55 +++++--
 drivers/irqchip/irq-gic-v3.c                       |   2 +-
 drivers/md/dm-crypt.c                              |  24 ++-
 drivers/md/dm-mpath.c                              |   6 +-
 drivers/md/dm.c                                    |  10 +-
 drivers/media/dvb-frontends/mb86a20s.c             | 104 ++++++-------
 drivers/media/usb/cx231xx/cx231xx-avcore.c         |   5 +-
 drivers/media/usb/cx231xx/cx231xx-cards.c          |   2 +-
 drivers/media/usb/cx231xx/cx231xx-core.c           |   3 +-
 drivers/memstick/host/rtsx_usb_ms.c                |   6 +
 drivers/misc/mei/hw-me-regs.h                      |   3 +
 drivers/misc/mei/pci-me.c                          |   3 +
 drivers/mmc/card/block.c                           |   5 +-
 drivers/mmc/card/queue.h                           |   2 +-
 drivers/mmc/host/rtsx_usb_sdmmc.c                  |   7 +-
 drivers/mmc/host/sdhci.c                           |   2 +-
 drivers/mtd/ubi/wl.c                               |  21 ++-
 drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c   |   4 +
 drivers/net/ethernet/mellanox/mlx4/en_netdev.c     |   2 +-
 drivers/net/wireless/realtek/rtlwifi/regd.c        |   4 +-
 drivers/pci/quirks.c                               |   1 +
 drivers/regulator/tps65910-regulator.c             |   6 +
 drivers/s390/scsi/zfcp_dbf.c                       | 162 ++++++++++++++++++---
 drivers/s390/scsi/zfcp_dbf.h                       |  14 +-
 drivers/s390/scsi/zfcp_erp.c                       |  12 +-
 drivers/s390/scsi/zfcp_ext.h                       |   8 +-
 drivers/s390/scsi/zfcp_fsf.c                       |  22 ++-
 drivers/s390/scsi/zfcp_fsf.h                       |   4 +-
 drivers/s390/scsi/zfcp_scsi.c                      |   8 +-
 drivers/scsi/hpsa.c                                |  78 +++++++++-
 drivers/scsi/scsi_scan.c                           |   2 +-
 drivers/scsi/sd.c                                  |   8 +-
 drivers/scsi/sd.h                                  |   5 +
 drivers/target/target_core_transport.c             |  11 +-
 drivers/target/target_core_xcopy.c                 |  34 ++++-
 drivers/video/fbdev/efifb.c                        |   6 +-
 fs/ceph/file.c                                     |   3 +-
 fs/cifs/cifs_debug.c                               |  57 ++------
 fs/cifs/cifs_debug.h                               |   2 +-
 fs/cifs/cifsfs.c                                   |   9 +-
 fs/cifs/cifsglob.h                                 |  34 ++---
 fs/cifs/cifssmb.c                                  |   4 +-
 fs/cifs/connect.c                                  |  16 +-
 fs/cifs/file.c                                     |  66 +++++----
 fs/cifs/misc.c                                     |  15 +-
 fs/cifs/readdir.c                                  |   6 +-
 fs/cifs/smb2glob.h                                 |  10 ++
 fs/cifs/smb2inode.c                                |   6 +
 fs/cifs/smb2misc.c                                 |  16 +-
 fs/cifs/smb2ops.c                                  |  12 +-
 fs/cifs/smb2pdu.c                                  |  25 +++-
 fs/cifs/smb2pdu.h                                  |   2 +-
 fs/ext4/sysfs.c                                    |   4 +
 fs/isofs/inode.c                                   |   8 +-
 fs/jbd2/transaction.c                              |   3 +-
 fs/nfs/delegation.c                                |  16 +-
 fs/nfs/nfs42proc.c                                 |   1 +
 fs/nfs/nfs4state.c                                 |   3 +
 fs/overlayfs/copy_up.c                             |  12 +-
 fs/overlayfs/dir.c                                 |   5 +-
 fs/pstore/ram.c                                    |  17 ++-
 fs/pstore/ram_core.c                               |  49 +------
 fs/super.c                                         |   6 +-
 fs/ubifs/dir.c                                     |   8 +-
 fs/ubifs/xattr.c                                   |   2 +
 include/linux/devfreq-event.h                      |   5 -
 include/linux/irqchip/arm-gic-v3.h                 |   2 +-
 include/linux/kernel.h                             |   2 +
 include/linux/lightnvm.h                           | 121 +++++++--------
 include/linux/sem.h                                |   1 +
 include/linux/string.h                             |   6 +-
 include/linux/swap.h                               |   2 +
 include/target/target_core_base.h                  |   1 +
 ipc/sem.c                                          | 130 ++++++++++-------
 lib/kstrtox.c                                      |  64 ++++++++
 lib/string.c                                       |  29 ----
 mm/filemap.c                                       |  95 ++++++------
 mm/workingset.c                                    |  10 +-
 net/sunrpc/xprtsock.c                              |  11 +-
 sound/pci/hda/dell_wmi_helper.c                    |   2 +-
 sound/pci/hda/thinkpad_helper.c                    |   2 +-
 .../perf/util/intel-pt-decoder/intel-pt-decoder.c  |  38 +++++
 tools/perf/util/intel-pt.c                         |  15 +-
 120 files changed, 1314 insertions(+), 673 deletions(-)