Merge 4.4.167 into kernel.lnx.4.4.r27-rel

Changes in 4.4.167: (91 commits)
        media: em28xx: Fix use-after-free when disconnecting
        Revert "wlcore: Add missing PM call for wlcore_cmd_wait_for_event_or_timeout()"
        rapidio/rionet: do not free skb before reading its length
        s390/qeth: fix length check in SNMP processing
        usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2
        kvm: mmu: Fix race in emulated page table writes
        xtensa: enable coprocessors that are being flushed
        xtensa: fix coprocessor context offset definitions
        Btrfs: ensure path name is null terminated at btrfs_control_ioctl
        ALSA: wss: Fix invalid snd_free_pages() at error path
        ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write
        ALSA: control: Fix race between adding and removing a user element
        ALSA: sparc: Fix invalid snd_free_pages() at error path
        ext2: fix potential use after free
        dmaengine: at_hdmac: fix memory leak in at_dma_xlate()
        dmaengine: at_hdmac: fix module unloading
        btrfs: release metadata before running delayed refs
        USB: usb-storage: Add new IDs to ums-realtek
        usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series
        misc: mic/scif: fix copy-paste error in scif_create_remote_lookup
        Kbuild: suppress packed-not-aligned warning for default setting only
        exec: avoid gcc-8 warning for get_task_comm
        disable stringop truncation warnings for now
        kobject: Replace strncpy with memcpy
        unifdef: use memcpy instead of strncpy
        kernfs: Replace strncpy with memcpy
        ip_tunnel: Fix name string concatenate in __ip_tunnel_create()
        drm: gma500: fix logic error
        scsi: bfa: convert to strlcpy/strlcat
        staging: rts5208: fix gcc-8 logic error warning
        kdb: use memmove instead of overlapping memcpy
        iser: set sector for ambiguous mr status errors
        uprobes: Fix handle_swbp() vs. unregister() + register() race once more
        MIPS: ralink: Fix mt7620 nd_sd pinmux
        mips: fix mips_get_syscall_arg o32 check
        drm/ast: Fix incorrect free on ioregs
        scsi: scsi_devinfo: cleanly zero-pad devinfo strings
        ALSA: trident: Suppress gcc string warning
        scsi: csiostor: Avoid content leaks and casts
        kgdboc: Fix restrict error
        kgdboc: Fix warning with module build
        leds: call led_pwm_set() in leds-pwm to enforce default LED_OFF
        leds: turn off the LED and wait for completion on unregistering LED class device
        leds: leds-gpio: Fix return value check in create_gpio_led()
        Input: xpad - quirk all PDP Xbox One gamepads
        Input: matrix_keypad - check for errors from of_get_named_gpio()
        Input: elan_i2c - add ELAN0620 to the ACPI table
        Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR
        Input: elan_i2c - add support for ELAN0621 touchpad
        btrfs: Always try all copies when reading extent buffers
        Btrfs: fix use-after-free when dumping free space
        ARC: change defconfig defaults to ARCv2
        arc: [devboards] Add support of NFSv3 ACL
        mm: cleancache: fix corruption on missed inode invalidation
        mm: mlock: avoid increase mm->locked_vm on mlock() when already mlock2(,MLOCK_ONFAULT)
        usb: gadget: dummy: fix nonsensical comparisons
        iommu/vt-d: Fix NULL pointer dereference in prq_event_thread()
        iommu/ipmmu-vmsa: Fix crash on early domain free
        can: rcar_can: Fix erroneous registration
        batman-adv: Expand merged fragment buffer for full packet
        bnx2x: Assign unique DMAE channel number for FW DMAE transactions.
        qed: Fix PTT leak in qed_drain()
        qed: Fix reading wrong value in loop condition
        net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command
        net/mlx4_core: Fix uninitialized variable compilation warning
        net/mlx4: Fix UBSAN warning of signed integer overflow
        net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts
        iommu/vt-d: Use memunmap to free memremap
        net: amd: add missing of_node_put()
        usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device
        usb: appledisplay: Add 27" Apple Cinema Display
        USB: check usb_get_extra_descriptor for proper size
        ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c
        ALSA: hda: Add support for AMD Stoney Ridge
        ALSA: pcm: Fix starvation on down_write_nonblock()
        ALSA: pcm: Call snd_pcm_unlink() conditionally at closing
        ALSA: pcm: Fix interval evaluation with openmin/max
        virtio/s390: avoid race on vcdev->config
        virtio/s390: fix race in ccw_io_helper()
        SUNRPC: Fix leak of krb5p encode pages
        xhci: Prevent U1/U2 link pm states if exit latency is too long
        Staging: lustre: remove two build warnings
        cifs: Fix separator when building path from dentry
        tty: serial: 8250_mtk: always resume the device in probe.
        kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var()
        mac80211_hwsim: Timer should be initialized before device registered
        mac80211: Clear beacon_int in ieee80211_do_stop
        mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext
        mac80211: fix reordering of buffered broadcast packets
        mac80211: ignore NullFunc frames in the duplicate detection
        Linux 4.4.167

Signed-off-by: Nathan Chancellor <natechancellor@gmail.com>