[3.16.y-ckt stable] Linux 3.16.7-ckt26 stable review

[Luis Henriques]

This is the start of the review cycle for the Linux 3.16.7-ckt26 stable
kernel.

This version contains 142 new patches, summarized below.  The new patches
are posted as replies to this message and also available in this git branch:

http://kernel.ubuntu.com/git/ubuntu/linux.git/log/?h=linux-3.16.y-review

git://kernel.ubuntu.com/ubuntu/linux.git  linux-3.16.y-review

The review period for version 3.16.7-ckt26 will be open for the next three
days.  To report a problem, please reply to the relevant follow-up patch
message.

For more information about the Linux 3.16.y-ckt extended stable kernel
series, see https://wiki.ubuntu.com/Kernel/Dev/ExtendedStable .

 -Luis

--
 Documentation/filesystems/efivarfs.txt         |   7 +
 Documentation/networking/ip-sysctl.txt         |   8 +
 arch/arm/boot/dts/kirkwood-ds112.dts           |   2 +-
 arch/arm/kvm/guest.c                           |   2 +-
 arch/mips/kernel/traps.c                       |  13 +-
 arch/powerpc/kernel/module_64.c                |   2 +-
 arch/powerpc/kvm/book3s_hv_rmhandlers.S        |  14 ++
 arch/x86/ia32/ia32entry.S                      |   1 +
 arch/x86/kernel/acpi/sleep.c                   |   7 +
 arch/x86/kvm/paging_tmpl.h                     |   2 +-
 arch/x86/kvm/vmx.c                             |   7 +
 arch/x86/kvm/x86.c                             |   9 +-
 block/bio.c                                    |   9 +-
 crypto/ablkcipher.c                            |   1 +
 crypto/blkcipher.c                             |   1 +
 drivers/ata/libata-scsi.c                      |  11 +-
 drivers/dma/dw/core.c                          |  15 +-
 drivers/firmware/dmi_scan.c                    |   5 +-
 drivers/firmware/efi/efivars.c                 |  33 ++-
 drivers/firmware/efi/vars.c                    | 144 +++++++++----
 drivers/gpio/gpio-rcar.c                       |  42 ++++
 drivers/gpu/drm/ast/ast_main.c                 |   2 +-
 drivers/gpu/drm/i915/intel_dsi_panel_vbt.c     |   8 +-
 drivers/gpu/drm/i915/intel_i2c.c               |   2 +-
 drivers/gpu/drm/qxl/qxl_ioctl.c                |   3 +-
 drivers/gpu/drm/radeon/radeon_device.c         |   1 -
 drivers/gpu/drm/radeon/radeon_pm.c             |   8 +-
 drivers/gpu/drm/radeon/radeon_sa.c             |   5 -
 drivers/gpu/drm/radeon/radeon_ttm.c            |   2 +-
 drivers/hwmon/ads1015.c                        |   2 +-
 drivers/infiniband/core/sa_query.c             |   2 +-
 drivers/input/tablet/aiptek.c                  |   9 +
 drivers/iommu/amd_iommu_init.c                 |  34 ++--
 drivers/iommu/dmar.c                           |   2 +-
 drivers/iommu/intel_irq_remapping.c            |   2 +-
 drivers/md/bcache/super.c                      |   2 +
 drivers/media/i2c/adv7604.c                    |   3 +-
 drivers/mtd/ubi/upd.c                          |   2 +-
 drivers/net/bonding/bond_main.c                |  40 ++--
 drivers/net/can/usb/ems_usb.c                  |  14 +-
 drivers/net/can/usb/gs_usb.c                   |  24 +--
 drivers/net/ethernet/broadcom/tg3.c            |  25 ++-
 drivers/net/ethernet/mellanox/mlx4/en_clock.c  |  25 ++-
 drivers/net/ethernet/mellanox/mlx4/en_netdev.c |  11 +-
 drivers/net/ethernet/mellanox/mlx4/en_port.c   |   4 +-
 drivers/net/ethernet/moxa/moxart_ether.c       |   4 +-
 drivers/net/phy/bcm7xxx.c                      |   2 +-
 drivers/net/phy/dp83640.c                      |  17 ++
 drivers/net/ppp/pppoe.c                        |   2 +
 drivers/net/usb/cdc_ncm.c                      |  21 +-
 drivers/net/usb/qmi_wwan.c                     |   1 +
 drivers/pci/xen-pcifront.c                     |  10 +-
 drivers/s390/block/dasd_alias.c                |  23 ++-
 drivers/scsi/scsi_sysfs.c                      |   6 +-
 drivers/staging/android/binder.c               |   2 +-
 drivers/target/target_core_tmr.c               | 137 ++++++++++---
 drivers/target/target_core_transport.c         | 272 +++++++++++++++++--------
 drivers/usb/chipidea/otg.c                     |   2 +-
 drivers/usb/dwc3/core.h                        |   1 -
 drivers/usb/dwc3/ep0.c                         |   5 -
 drivers/usb/dwc3/gadget.c                      |  70 +++++--
 drivers/usb/serial/cp210x.c                    |   3 +
 drivers/usb/serial/option.c                    |  14 ++
 drivers/usb/serial/qcserial.c                  |   7 +-
 drivers/vfio/pci/vfio_pci.c                    |   9 +-
 drivers/vfio/vfio_iommu_type1.c                |   6 +-
 drivers/xen/xen-pciback/pciback_ops.c          |   9 +-
 fs/aio.c                                       |   9 +-
 fs/cifs/cifsencrypt.c                          |   2 +-
 fs/cifs/cifsfs.h                               |  12 +-
 fs/cifs/cifssmb.c                              |  21 +-
 fs/cifs/smb2pdu.c                              |  24 ++-
 fs/efivarfs/file.c                             |  70 +++++++
 fs/efivarfs/inode.c                            |  30 ++-
 fs/efivarfs/internal.h                         |   3 +-
 fs/efivarfs/super.c                            |  16 +-
 fs/ext4/inode.c                                |  72 +++++--
 fs/ext4/move_extent.c                          |  16 +-
 fs/ext4/resize.c                               |   2 +-
 fs/hpfs/namei.c                                |  31 +--
 fs/jffs2/README.Locking                        |   5 +-
 fs/jffs2/build.c                               |  75 +++++--
 fs/jffs2/file.c                                |  39 ++--
 fs/jffs2/gc.c                                  |  17 +-
 fs/jffs2/nodelist.h                            |   6 +-
 fs/namei.c                                     |   4 +
 fs/nfs/nfs4proc.c                              |   4 +-
 include/linux/ata.h                            |   4 +-
 include/linux/compiler.h                       |   2 +-
 include/linux/efi.h                            |   5 +-
 include/linux/ipv6.h                           |   1 +
 include/linux/libata.h                         |   2 +-
 include/linux/nfs_fs.h                         |   4 +-
 include/linux/skbuff.h                         |  25 +++
 include/linux/tracepoint.h                     |  17 +-
 include/linux/ucs2_string.h                    |   4 +
 include/net/ip_fib.h                           |   1 +
 include/net/iw_handler.h                       |   6 +
 include/target/target_core_base.h              |   2 +
 include/uapi/linux/ipv6.h                      |   1 +
 kernel/resource.c                              |   5 +-
 kernel/trace/trace_events.c                    |   3 +-
 lib/ucs2_string.c                              |  62 ++++++
 net/ceph/messenger.c                           |   4 +-
 net/core/skbuff.c                              |   2 +
 net/core/sysctl_net_core.c                     |  10 +
 net/ipv4/devinet.c                             |   2 +-
 net/ipv4/igmp.c                                |   3 +-
 net/ipv4/ip_sockglue.c                         |   2 +
 net/ipv4/ping.c                                |   4 +-
 net/ipv4/raw.c                                 |   4 +-
 net/ipv4/route.c                               |  77 +++++--
 net/ipv4/tcp.c                                 |   4 +-
 net/ipv4/tcp_ipv4.c                            |  13 +-
 net/ipv4/tcp_metrics.c                         |   2 +-
 net/ipv4/udp.c                                 |   4 +-
 net/ipv6/addrconf.c                            |  12 +-
 net/ipv6/datagram.c                            |   3 +
 net/ipv6/exthdrs_core.c                        |   6 +-
 net/ipv6/mcast.c                               |   3 +-
 net/ipv6/ndisc.c                               |  16 +-
 net/iucv/af_iucv.c                             |   3 +
 net/mac80211/agg-rx.c                          |   2 +-
 net/mac80211/rc80211_minstrel_ht.c             |   2 +-
 net/sctp/protocol.c                            |  47 ++++-
 net/sunrpc/cache.c                             |   2 +-
 net/unix/af_unix.c                             |  23 ++-
 net/unix/diag.c                                |   2 +-
 net/wireless/core.c                            |   2 +
 net/wireless/wext-core.c                       |  52 ++++-
 sound/core/control_compat.c                    |  90 ++++++--
 sound/core/rawmidi_compat.c                    |  53 +++++
 sound/core/seq/oss/seq_oss.c                   |   2 -
 sound/core/seq/oss/seq_oss_device.h            |   1 -
 sound/core/seq/oss/seq_oss_init.c              |  16 --
 sound/core/seq/seq_fifo.c                      |   4 +-
 sound/core/seq/seq_memory.c                    |  19 +-
 sound/core/seq/seq_ports.c                     |  17 +-
 sound/core/seq/seq_prioq.c                     |   4 +-
 sound/core/seq/seq_queue.c                     |   4 +-
 sound/core/seq/seq_timer.c                     |   4 +-
 sound/core/timer_compat.c                      |  18 +-
 sound/pci/hda/patch_realtek.c                  |  17 ++
 sound/pci/rme9652/hdsp.c                       |   4 +-
 sound/pci/rme9652/hdspm.c                      |  16 +-
 sound/soc/codecs/wm8958-dsp2.c                 |   8 +-
 sound/soc/codecs/wm8994.c                      |   4 +-
 sound/soc/codecs/wm_adsp.c                     |   8 +-
 tools/testing/selftests/efivarfs/efivarfs.sh   |  19 +-
 tools/testing/selftests/efivarfs/open-unlink.c |  72 ++++++-
 virt/kvm/async_pf.c                            |   2 +-
 151 files changed, 1800 insertions(+), 680 deletions(-)

Al Viro (1):
      do_last(): don't let a bogus return value from ->open() et.al. to confuse us

Alex Deucher (3):
      drm/radeon/pm: adjust display configuration after powerstate
      drm/radeon/pm: update current crtc info after setting the powerstate
      Revert "drm/radeon/pm: adjust display configuration after powerstate"

Amir Vadai (1):
      net/mlx4_en: Count HW buffer overrun only once

Andreas Schwab (1):
      powerpc: Fix dedotify for binutils >= 2.26

Andrey Skvortsov (1):
      USB: option: add support for SIM7100E

Andy Lutomirski (1):
      x86/entry/compat: Add missing CLAC to entry_INT80_32

Andy Shevchenko (1):
      dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer

Anton Protopopov (2):
      cifs: fix erroneous return value
      rtnl: RTM_GETNETCONF: fix wrong return value

Arnd Bergmann (2):
      tracing: Fix freak link error caused by branch tracer
      libata: fix HDIO_GET_32BIT ioctl

Ben Hutchings (1):
      crypto: {blk,giv}cipher: Set has_setkey

Benjamin Coddington (1):
      NFSv4: Fix a dentry leak on alias use

Benjamin Poirier (1):
      mld, igmp: Fix reserved tailroom calculation

BjÃrn Mork (4):
      USB: option: add "4G LTE usb-modem U901"
      qmi_wwan: add "4G LTE usb-modem U901"
      USB: qcserial: add Sierra Wireless EM74xx device ID
      cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind

CQ Tang (1):
      iommu/vt-d: Fix 64-bit accesses to 32-bit DMAR_GSTS_REG

Chris Bainbridge (1):
      mac80211: fix use of uninitialised values in RX aggregation

Christian Borntraeger (1):
      KVM: async_pf: do not warn on page allocation failures

Christoph Hellwig (1):
      nfs: fix nfs_size_to_loff_t

Dan Carpenter (1):
      net: moxa: fix an error code

Daniele Palmas (1):
      USB: serial: option: add support for Telit LE922 PID 0x1045

David Woodhouse (2):
      jffs2: Fix page lock / f->sem deadlock
      Fix directory hardlinks from deleted directories

Dmitry V. Levin (1):
      unix_diag: fix incorrect sign extension in unix_lookup_by_ino

Eric Dumazet (2):
      tcp: fix NULL deref in tcp_v4_send_ack()
      ipv4: fix memory leaks in ip_cmsg_send() callers

Eryu Guan (2):
      ext4: don't read blocks from disk after extents being swapped
      ext4: iterate over buffer heads correctly in move_extent_per_page()

Eugenia Emantayev (2):
      net/mlx4_en: Choose time-stamping shift value according to HW frequency
      net/mlx4_en: Avoid changing dev->features directly in run-time

Felix Fietkau (1):
      mac80211: minstrel_ht: set default tx aggregation timeout to 0

Florian Fainelli (1):
      net: phy: bcm7xxx: Fix shadow mode 2 disabling

Florian Westphal (1):
      ipv6: re-enable fragment header matching in ipv6_find_hdr

Geert Uytterhoeven (1):
      gpio: rcar: Add Runtime PM handling for interrupts

Gerd Hoffmann (1):
      drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command

Gerhard Uttenthaler (1):
      can: ems_usb: Fix possible tx overflow

Greg Kroah-Hartman (1):
      AIO: properly check iovec sizes

Guillaume Nault (1):
      pppoe: fix reference counting in PPPoE proxy

Hangbin Liu (1):
      net/ipv6: add sysctl option accept_ra_min_hop_limit

Hannes Reinecke (1):
      bio: return EINTR if copying to user space got interrupted

Hans Verkuil (1):
      [media] adv7604: fix tx 5v detect regression

Hans Westgaard Ry (1):
      net:Add sysctl_max_skb_frags

Harvey Hunt (1):
      libata: Align ata_device's id on a cacheline

Heinrich Schuchardt (1):
      ARM: dts: kirkwood: use unique machine name for ds112

Ilya Dryomov (1):
      libceph: don't bail early from try_read() when skipping a message

Insu Yun (1):
      ext4: fix potential integer overflow

Jack Morgenstein (1):
      net/mlx4_core: Allow resetting VF admin mac to zero

James Bottomley (1):
      scsi: fix soft lockup in scsi_remove_target() on module removal

Jan Kara (2):
      ext4: fix bh->b_state corruption
      ext4: fix crashes in dioread_nolock mode

Jani Nikula (2):
      drm/i915/dsi: defend gpio table against out of bounds access
      drm/i915/dsi: don't pass arbitrary data to sideband

Jason Andryuk (1):
      lib/ucs2_string: Correct ucs2 -> utf8 conversion

Jay Vosburgh (1):
      bonding: Fix ARP monitor validation

Jianjian Huo (1):
      bcache: add mutex lock for bch_is_open

Johannes Berg (2):
      wext: fix message delay/ordering
      cfg80211/wext: fix message ordering

John Youn (1):
      usb: dwc3: Fix assignment of EP transfer resources

Justin Maggard (1):
      cifs: fix out-of-bounds access in lease parsing

Kai-Heng Feng (1):
      ALSA: hda - Fixing background noise on Dell Inspiron 3162

Ken Lin (1):
      USB: cp210x: add IDs for GE B650V3 and B850V3 boards

Konrad Rzeszutek Wilk (3):
      xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
      xen/pciback: Save the number of MSI-X entries to be copied later.
      xen/pcifront: Fix mysterious crashes when NUMA locality information was extracted.

Konstantin Khlebnikov (1):
      tcp: convert cached rtt from usec to jiffies when feeding initial rto

Linus Torvalds (1):
      Revert "drm/radeon: call hpd_irq_event on resume"

Lisa Du (1):
      drivers: android: correct the size of struct binder_uintptr_t for BC_DEAD_BINDER_DONE

Luis Henriques (2):
      Revert "firmware: dmi_scan: Fix UUID endianness for SMBIOS >= 2.6"
      Revert "drm/radeon: hold reference to fences in radeon_sa_bo_new"

Maciej W. Rozycki (1):
      MIPS: traps: Fix SIGFPE information leak from `do_ov' and `do_trap_or_bp'

Manfred Rudigier (1):
      net: dp83640: Fix tx timestamp overflow handling.

Marcelo Tosatti (1):
      KVM: x86: move steal time initialization to vcpu entry time

Matt Fleming (1):
      efi: Add pstore variables to the deletion whitelist

Maximilain Schneider (1):
      can: gs_usb: fixed disconnect bug by removing erroneous use of kfree()

Michael S. Tsirkin (2):
      vfio: fix ioctl error handling
      arm/arm64: KVM: Fix ioctl error handling

Mike Krinkin (1):
      KVM: x86: MMU: fix ubsan index-out-of-range warning

Mikulas Patocka (1):
      hpfs: don't truncate the file when delete fails

Neil Horman (1):
      sctp: Fix port hash table size computation

Nicholas Bellinger (6):
      target: Fix LUN_RESET active TMR descriptor handling
      target: Fix LUN_RESET active I/O handling for ACK_KREF
      target: Fix TAS handling for multi-session se_node_acls
      target: Fix remote-port TMR ABORT + se_cmd fabric stop
      target: Fix race with SCF_SEND_DELAYED_TAS handling
      target: Drop incorrect ABORT_TASK put for completed commands

Or Gerlitz (1):
      IB/core: Use GRH when the path hop-limit > 0

Paolo Abeni (1):
      ipv6/udp: use sticky pktinfo egress ifindex on connect()

Patrik Halfar (1):
      USB: qcserial: add Dell Wireless 5809e Gobi 4G HSPA+ (rev3)

Paul Mackerras (1):
      KVM: PPC: Book3S HV: Sanitize special-purpose register values on guest exit

Pavel Shilovsky (1):
      CIFS: Fix SMB2+ interim response processing for read requests

Peter Chen (1):
      usb: chipidea: otg: change workqueue ci_otg as freezable

Peter Jones (5):
      lib/ucs2_string: Add ucs2 -> utf8 helper functions
      efi: Use ucs2_as_utf8 in efivarfs instead of open coding a bad version
      efi: Do variable name validation tests in utf8
      efi: Make our variable validation list include the guid
      efi: Make efivarfs entries immutable by default

Peter Rosin (1):
      hwmon: (ads1015) Handle negative conversion values correctly

Radim KrÄmÃÅ (1):
      KVM: VMX: disable PEBS before a guest entry

Rainer Weikusat (2):
      af_unix: Don't set err in unix_stream_read_generic unless there was an error
      af_unix: Guard against other == sk in unix_dgram_sendmsg

Rasmus Villemoes (2):
      drm/i915: fix error path in intel_setup_gmbus()
      drm/radeon: use post-decrement in error handling

Richard Weinberger (1):
      ubi: Fix out of bounds write in volume update code

Simon Guinot (1):
      kernel/resource.c: fix muxed resource handling in __request_region()

Simon South (1):
      ALSA: hda - Fix mic issues on Acer Aspire E1-472

Siva Reddy Kallam (1):
      tg3: Fix for tg3 transmit queue 0 timed out when too many gso_segs

Stefan Haberland (2):
      s390/dasd: prevent incorrect length error under z/VM after PAV changes
      s390/dasd: fix refcount for PAV reassignment

Stefan Hajnoczi (1):
      sunrpc/cache: fix off-by-one in qword_get()

Steven Rostedt (Red Hat) (3):
      tracepoints: Do not trace when cpu is offline
      tracing: Fix showing function event in available_events
      tracing: Fix check for cpu online when event is disabled

Suravee Suthikulpanit (1):
      iommu/amd: Fix boot warning when device 00:00.0 is not iommu covered

Takashi Iwai (15):
      ALSA: seq: Drop superfluous error/debug messages after malloc failures
      ALSA: seq: Fix leak of pool buffer at concurrent writes
      ALSA: seq: Fix double port list deletion
      ALSA: hda - Fix headset support and noise on HP EliteBook 755 G2
      ALSA: ctl: Fix ioctls for X32 ABI
      ALSA: rawmidi: Fix ioctls X32 ABI
      ALSA: timer: Fix broken compat timer user status ioctl
      ALSA: timer: Fix ioctls for X32 ABI
      ALSA: hdspm: Fix wrong boolean ctl value accesses
      ALSA: hdspm: Fix zero-division
      ALSA: hdsp: Fix wrong boolean ctl value accesses
      ALSA: seq: oss: Don't drain at closing a client
      ASoC: wm8958: Fix enum ctl accesses in a wrong type
      ASoC: wm8994: Fix enum ctl accesses in a wrong type
      ASoC: wm_adsp: Fix enum ctl accesses in a wrong type

Thomas Betker (1):
      Revert "jffs2: Fix lock acquisition order bug in jffs2_write_begin"

Timothy Pearson (1):
      drm/ast: Fix incorrect register check for DRAM width

Todd E Brandt (1):
      PM / sleep / x86: Fix crash on graph trace through x86 suspend

Ursula Braun (1):
      af_iucv: Validate socket address length in iucv_sock_bind()

Vittorio Alfieri (1):
      USB: cp210x: Add ID for Parrot NMEA GPS Flight Recorder

Vladis Dronov (1):
      Input: aiptek - fix crash on detecting device without endpoints

Xin Long (1):
      route: check and remove route cache when we get route

Yadan Fan (1):
      Fix cifs_uniqueid_to_ino_t() function for s390x

Yegor Yefremov (1):
      USB: serial: option: add support for Quectel UC20